CIPM: Certified Information Privacy ManagerDemo

Question

What administrative safeguards should be put in place to protect the collected data while Manasa and her product-management team are using it?

A Document the data flows for the collected data.
B Conduct a Privacy Impact Assessment (PIA) to evaluate the risks involved.
C Implement a policy restricting data access on a "need to know" basis.
D Limit data transfers to the US by keeping data collected in Europe within a local data center.

Explanation

A policy that limits access on a need-to-know basis restricts sensitive personal and medical data to personnel whose assigned duties require it. This is an administrative access-control safeguard that helps prevent inappropriate internal access, use, and disclosure of personal information.

Learn more

CIPM: Certified Information Privacy ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ211

Community Discussion