IsacaIsaca
CDPSE · Question #169
CDPSE Question #169: Real Exam Question with Answer & Explanation
Sign in or unlock CDPSE to reveal the answer and full explanation for question #169. The question stem and answer options stay visible for context.
Privacy Governance
Question
A privacy risk assessment identified that a third-party collects personal data on the organization's behalf. This finding could subject the organization to a regulatory fine for not disclosing this relationship. What should the organization do NEXT?
Options
- AAmend the privacy policy to include a provision that data might be collected by trusted third
- BReview the third-party relationship to determine who should be collecting data.
- CUpdate the risk assessment process to cover only required disclosures.
- DDisclose the relationship to those affected in jurisdictions where such disclosures are required.
Unlock CDPSE to see the answer
You've previewed enough free CDPSE questions. Unlock CDPSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Privacy risk management#Third-party data processing#Disclosure requirements#Regulatory compliance