QuestionQ63

VerifiedPrivacy Governance

Which party should a data subject contact FIRST if they believe their personal information was collected and used without consent?

Explanation

The organization’s chief privacy officer (CPO) is the appropriate initial contact for a concern about the organization’s collection or use of personal information. The CPO can investigate the processing, coordinate remediation, and respond to the data subject; a data protection authority is typically contacted as an escalation when the concern is not satisfactorily resolved.

Community Discussion

No comments yet. Be the first to start the discussion!