Which key stakeholder within an organization should be responsible for approving the outcomes of a privacy impact assessment (PIA)?

• A.Data owner
• B.Data processor
• C.Privacy data analyst
• D.Data custodian

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST concern for an organization subject to cross-border data transfer regulations when using a cloud service provider to store and process data?

• A.The extent of the service provider's access to data has not been established.
• B.The data is stored in a region with different data protection requirements.
• C.Personal data stored on the cloud has not been anonymized.
• D.The service provider has denied the organization's request for right to audit.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to protect personal data in the custody of a third party?

• A.Have corporate counsel monitor privacy compliance.
• B.Require the third party to provide periodic documentation of its privacy management program.
• C.Include requirements to comply with the organization's privacy policies in the contract.
• D.Add privacy-related controls to the vendor audit plan.

Comment: *

Name: *

Email: *

Verification: *

An organization has a policy requiring the encryption of personal data if transmitted through email. Which of the following is the BEST control to ensure the effectiveness of this policy?

• A.Implement a data loss prevention (DLP) tool.
• B.Provide periodic user awareness training on data encryption.
• C.Conduct regular control self-assessments (CSAs).
• D.Enforce annual attestation to policy compliance.

Comment: *

Name: *

Email: *

Verification: *

Which of the following features should be incorporated into an organization's technology stack to meet privacy requirements related to the rights of data subjects to control their personal data?

• A.Providing system engineers the ability to search and retrieve data
• B.Allowing individuals to have direct access to their data
• C.Allowing system administrators to manage data access
• D.Establishing a data privacy customer service bot for individuals

Comment: *

Name: *

Email: *

Verification: *