CIPM: Certified Information Privacy ManagerDemo

By IAPP · Question Mode

QuestionQ296

Privacy Operational Lifecycle: Assess

Which of these changes would typically not require a Privacy Impact Assessment (PIA)?

  • A When the volume of the personal data being processed changes.
  • B When new features are added that change the way personal data is accessed.
  • C When the privacy policy is updated to include a data subject access request option.
  • D When the solution is moved from on-premise data center to a hosted cloud service.
Explanation

A Privacy Impact Assessment is generally needed when a change materially affects how personal data is processed, accessed, stored, or hosted. Adding a data-subject access-request option to a privacy policy updates the notice and rights process rather than changing the underlying personal-data processing.

Community Discussion

No comments yet. Be the first to start the discussion!