nerdexam
Isaca

CDPSE · Question #155

What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?

The correct answer is B. Publishing a privacy notice. A privacy notice is the standard, formal mechanism used to communicate to individuals what personal data is collected, how it is used, how long it is retained, and what rights they have regarding that data. It is publicly accessible and required by most modern privacy regulations

Privacy Governance

Question

What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?

Options

  • AGaining consent when information is collected
  • BPublishing a privacy notice
  • CMailing rights documentation to customers
  • DDistributing a privacy rights policy

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    90% (28)
  • C
    6% (2)

Explanation

A privacy notice is the standard, formal mechanism used to communicate to individuals what personal data is collected, how it is used, how long it is retained, and what rights they have regarding that data. It is publicly accessible and required by most modern privacy regulations (e.g., GDPR, CCPA). Option A (gaining consent) is a legal basis for processing, not a communication vehicle for rights. Option C (mailing documentation) is not scalable or standard practice and would be supplementary at best. Option D (distributing a privacy rights policy) is an internal governance document, not a customer-facing communication tool. The privacy notice is the universally recognized, legally required instrument for this purpose.

Topics

#Privacy notice#Individual rights#Transparency#Data subject rights communication

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice