CIPM: Certified Information Privacy ManagerDemo

Question

Which safeguard can most efficiently ensure that privacy protection is incorporated into relationships with vendors?

A Include appropriate language about privacy protection in vendor contracts.
B Perform a privacy audit on any vendor under consideration.
C Require that a person trained in privacy protection be part of all vendor selection teams.
D Do business only with vendors who are members of privacy trade associations.

Explanation

Vendor contracts are the direct, enforceable mechanism for imposing privacy requirements on a vendor throughout the business relationship. They can define the vendor’s data-handling obligations, limits on use and disclosure, security controls, monitoring or audit provisions, and consequences for noncompliance. NIST privacy guidance identifies consistently including acceptable privacy-protection requirements in contracts with third parties supporting app development as a target practice.

Learn more

NIST Privacy Framework Hypothetical Use Case #2

CIPM: Certified Information Privacy ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ37

Community Discussion