QuestionQ104

Privacy Program Framework

Regarding an organization’s collection of personal data, what must the data subject be permitted to do?

  • A Evaluate the qualifications of a third-party processor before any data is transferred to that processor.
  • B Set a time-limit as to how long the personal data may be stored by the organization.
  • C Challenge the authenticity of the personal data and have it corrected if needed.
  • D Obtain a guarantee of prompt notification in instances involving unauthorized access of the data.
Explanation

Data subjects must be able to contest inaccurate personal data and have it corrected, reflecting the right to rectification.

Community Discussion

No comments yet. Be the first to start the discussion!