QuestionQ16

Privacy Program Framework

What is meant by “rationalizing” data protection requirements?

  • A Evaluate the costs and risks of applicable laws and regulations and address those that have the greatest penalties
  • B Look for overlaps in laws and regulations from which a common solution can be developed
  • C Determine where laws and regulations are redundant in order to eliminate some from requiring compliance
  • D Address the less stringent laws and regulations, and inform stakeholders why they are applicable
Explanation

Rationalization identifies overlapping obligations across applicable laws and regulations and develops common controls or a shared solution that satisfies those overlapping requirements efficiently.

Community Discussion

No comments yet. Be the first to start the discussion!