CDPSE: Certified Data Privacy Solutions Engineer

By Isaca · Question Mode

QuestionQ93

VerifiedPrivacy Risk Management and Compliance

An organization intends to change the originally specified purpose for collected personal data. What must it do NEXT?

Explanation

Before personal data are further processed for a purpose other than the original collection purpose, the controller must provide data subjects with information about that new purpose. Updating the privacy notice fulfills this transparency requirement. GDPR Article 13(3) establishes this obligation for data collected from the data subject.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!