Which of the following would BEST support an organization in fulfilling data subject rights?

• A.Data loss prevention (DLP) solution
• B.Documented and tested data breach handling process
• C.Contact form on the organization's website
• D.Current and accurate data map

Comment: *

Name: *

Email: *

Verification: *

Before executive leadership approves a new data privacy policy, it is MOST important to ensure:

• A.a privacy committee is established.
• B.a legal review is conducted.
• C.a training program is developed.
• D.a distribution methodology is identified.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST represents privacy threat modeling methodology?

• A.Mitigating inherent risks and threats associated with privacy control weaknesses
• B.Systematically eliciting and mitigating privacy threats in a software architecture
• C.Reliably estimating a threat actor's ability to exploit privacy vulnerabilities
• D.Replicating privacy scenarios that reflect representative software usage

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST indication of an effective records management program for personal data?

• A.The legal department has approved the retention policy.
• B.Archived data is used for future analytics.
• C.A retention schedule is in place.
• D.All sensitive data has been tagged.

Comment: *

Name: *

Email: *

Verification: *

Which of the following principles is MOST important to apply when granting access to an enterprise resource planning (ERP) system that contains a significant amount of personal data?

• A.Read-only access
• B.Least privilege
• C.Segregation of duties
• D.Data minimization

Comment: *

Name: *

Email: *

Verification: *