CDPSE · Question #171
Which of the following has the GREATEST impact on the treatment of data within the scope of an organization's privacy policy?
The correct answer is C. Data classification. Data classification assigns categories (e.g., public, internal, confidential, sensitive/personal) to data based on its nature and sensitivity. These categories directly determine what handling, access, retention, and protection rules apply under the privacy policy. All…
Question
Which of the following has the GREATEST impact on the treatment of data within the scope of an organization's privacy policy?
Options
- AData protection impact assessment (DPIA)
- BData flow diagram
- CData classification
- DData processing agreement
How the community answered
(56 responses)- A7% (4)
- B13% (7)
- C77% (43)
- D4% (2)
Explanation
Data classification assigns categories (e.g., public, internal, confidential, sensitive/personal) to data based on its nature and sensitivity. These categories directly determine what handling, access, retention, and protection rules apply under the privacy policy. All downstream decisions-who can access the data, how it must be encrypted, how long it is kept-flow from classification. A DPIA (A) assesses risks for specific processing activities but doesn't broadly govern treatment. A data flow diagram (B) maps where data goes but doesn't set treatment rules. A data processing agreement (D) governs third-party processor obligations, not internal treatment broadly.
Topics
Community Discussion
No community discussion yet for this question.