Which of the following is MOST important to capture in the audit log of an application hosting personal data?

The correct answer is B. Last user who accessed personal data. For privacy compliance and accountability, the most critical audit log entry is who accessed personal data and when. This supports breach investigation, demonstrates compliance with access controls required by regulations like GDPR, and enables detection of unauthorized or…

Data Life Cycle

Question

Options

AServer details of the hosting environment
BLast user who accessed personal data
CApplication error events
DLast logins of privileged users

How the community answered

(35 responses)

A
3% (1)
B
74% (26)
C
9% (3)
D
14% (5)

Explanation

For privacy compliance and accountability, the most critical audit log entry is who accessed personal data and when. This supports breach investigation, demonstrates compliance with access controls required by regulations like GDPR, and enables detection of unauthorized or excessive access. Server hosting details (A) are relevant to infrastructure management, not privacy accountability. Application error events (C) support troubleshooting but are not privacy-specific. Privileged user logins (D) are important for security but are secondary to tracking actual access to personal data records.

Topics

#Audit logging#Personal data access#Data lifecycle management#Incident response

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice