Which of the following scenarios poses the GREATEST risk to an organization from a privacy perspective?

• A.The organization lacks a hardware disposal policy.
• B.Emails are not consistently encrypted when sent internally.
• C.Privacy training is carried out by a service provider.
• D.The organization's privacy policy has not been reviewed in over a year.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to ensure privacy considerations are included when working with vendors?

• A.Including privacy requirements in the request for proposal (RFP) process
• B.Monitoring privacy-related service level agreements (SLAS)
• C.Including privacy requirements in vendor c tracts
• D.Requiring vendors to complete privacy awareness training

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be of GREATEST concern when an organization wants to store personal data in the cloud?

• A.Any vulnerabilities identified in the cloud system
• B.The data recovery capabilities of the storage provider
• C.The data security policies and practices of the storage provider
• D.The organization's potential legal liabilities related to the data

Comment: *

Name: *

Email: *

Verification: *

Who is ULTIMATELY accountable for the protection of personal data collected by an organization?

• A.Data processor
• B.Data owner
• C.Data custodian
• D.Data protection officer

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST approach to minimize privacy risk when collecting personal data?

• A.Use a third party to collect, store, and process the data.
• B.Collect data through a secure organizational web server.
• C.Collect only the data necessary to meet objectives.
• D.Aggregate the data immediately upon collection.

Comment: *

Name: *

Email: *

Verification: *