Katkat
Back

Address face recognition concerns with stakeholders

Capital OneData Scientist · Onsite
HardData ScientistOnsiteBehavioral & Leadership

Last updated

This question evaluates competency in risk identification and prioritization, privacy and regulatory compliance, model fairness and governance, technical verification metrics such as liveness and accuracy, and stakeholder management for biometric system deployment.

Your company considers adding face recognition to verify cardholders at POS. Tasks:

  1. Identify the top risks (privacy, bias, disparate impact, spoofing, data retention, consent, model governance). Prioritize them and propose risk owners.
  2. Propose a decision memo: purpose, legal/regulatory review (e.g., BIPA/CCPA/GDPR considerations), DPIA/PIA steps, data minimization, retention schedule, and deletion workflows.
  3. Define go/no-go criteria and monitoring: accuracy thresholds by demographic slices, false match ceilings, human-in-the-loop escalation, red-teaming, rollback plan, and incident response SLAs.
  4. Offer less intrusive alternatives achieving the same business goal; recommend one with rationale.
  5. A VP insists on launch despite fairness concerns. Draft how you would push back, align stakeholders, and propose a time-bound pilot with guardrails that could still be a hard stop.