QuestionQ104

VerifiedPrivacy Risk Management and Compliance

Which of the following is MOST important to ensure when preparing a business case to procure a new IT system that will process and store personal information?

Explanation

Data-protection requirements must be incorporated at the initial planning and procurement stage so the system is designed, selected, and operated in compliance with data-protection principles and individuals’ rights. Security controls and risk assessment support this broader requirement, but do not by themselves ensure full data-protection compliance.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!