QuestionQ27

Privacy Operational Lifecycle: Assess

Which of the following changes would not likely trigger an update to a data inventory?

  • A Outsourcing the Customer Relationship Management (CRM) function.
  • B Acquisition of a new subsidiary.
  • C Onboarding of a new vendor.
  • D Passage of a new privacy regulation.
Explanation

A data inventory should be updated when business operations, entities, systems, or third parties that process data change. A newly enacted privacy regulation affects compliance requirements but does not, by itself, alter the organization’s data processing activities, assets, or vendors.

Community Discussion

No comments yet. Be the first to start the discussion!