QuestionQ276

Privacy Governance

A data subject has asked for the personal data that an organization has collected about them. Which action should be taken FIRST when responding to this request?

  • A Verity the identity of the requestor.
  • B Determine the legal validity of the request.
  • C Verify which rights are involved in the request.
  • D Determine whether other parties’ privacy may be impacted.
Explanation

The requester’s identity must be verified before personal data is disclosed, preventing unauthorized access to the data subject’s information.

Community Discussion

No comments yet. Be the first to start the discussion!