CDPSE: Certified Data Privacy Solutions Engineer

By Isaca · Question Mode

QuestionQ37

VerifiedPrivacy Risk Management and Compliance

A project manager for a new data-collection system completed a privacy impact assessment (PIA) before designing the solution. After the system was released to production, an audit found that personal data was being collected that was not included in the PIA. What is the BEST way to prevent this situation in the future?

Explanation

Privacy checkpoints integrated into the secure development life cycle require privacy considerations and PIA updates as the system design and implementation evolve. This helps identify newly introduced personal-data collection before the system reaches production.

Community Discussion

No comments yet. Be the first to start the discussion!