QuestionQ63

Privacy Governance

Which party should a data subject contact FIRST if they believe their personal information was collected and used without consent?

  • A Privacy rights advocate
  • B Outside privacy counsel
  • C Data protection authorities
  • D The organization’s chief privacy officer (CPO)
Explanation

The organization’s chief privacy officer (CPO) is the appropriate initial contact for a concern about the organization’s collection or use of personal information. The CPO can investigate the processing, coordinate remediation, and respond to the data subject; a data protection authority is typically contacted as an escalation when the concern is not satisfactorily resolved.

Community Discussion

No comments yet. Be the first to start the discussion!