A healthcare provider is adopting AI-driven diagnostics tools.

The best answer is B. Consult with legal experts . PMI’s CPMAI exam content outline states that project managers should monitor regulatory and policy compliance , ensure adherence to industry and sector-specific compliance requirements , and coordinate with legal and compliance teams as part of trustworthy AI oversight. In healthcare, where diagnostic tools can involve sensitive personal data and heavily regulated decision contexts, early consultation with legal experts is the strongest first step because it helps clarify the applicable laws, obligations, documentation needs, and risk controls before the project moves further into piloting or tooling.

Option A may be useful later for testing feasibility, but it does not establish whether the solution is compliant. Option C is too broad for a scenario centered specifically on regulatory risk. Option D is premature because software implementation should follow an understanding of the actual legal and compliance requirements. PMI’s trustworthy AI guidance also emphasizes governance, ethics, responsibility, and transparency as intentional design choices rather than after-the-fact technical add-ons. That makes legal and compliance consultation the most appropriate initial action when noncompliance risk is the immediate concern.