Which of the following should an organization do FIRST to ensure it can respond to all data subject access requests in a timely manner?

The correct answer is A. Understand the data in its possession.. Before an organization can respond to any data subject access request (DSAR), it must first know what personal data it holds, where it is stored, and how it flows through the organization - essentially, a data inventory or mapping exercise. Without this foundation, no platform, p

Data Life Cycle

Question

Options

AUnderstand the data in its possession.
BInvest in a platform to automate data review
CConfirm what is required for disclosure.
DCreate a policy for handling access request

How the community answered

(22 responses)

A
68% (15)
B
5% (1)
C
18% (4)
D
9% (2)

Explanation

Before an organization can respond to any data subject access request (DSAR), it must first know what personal data it holds, where it is stored, and how it flows through the organization - essentially, a data inventory or mapping exercise. Without this foundation, no platform, policy, or process can function effectively. Automating review (B), confirming disclosure requirements (C), and creating handling policies (D) are all necessary steps, but they depend on first knowing what data exists.

Topics

#Data Subject Access Requests (DSAR)#Data Inventory#Individual Rights#Privacy Program Implementation

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice