CDPSE · Question #280
During which stage of the software development life cycle (SDLC) is it MOST critical to conduct a privacy impact assessment (PIA)?
The correct answer is A. Development. Conducting a Privacy Impact Assessment (PIA) during the development stage of the SDLC is most critical because this is when the detailed technical design, data flows, storage mechanisms, and processing logic are being actively defined and coded. Identifying privacy risks at…
Question
During which stage of the software development life cycle (SDLC) is it MOST critical to conduct a privacy impact assessment (PIA)?
Options
- ADevelopment
- BImplementation
- CTesting
- DPlanning
How the community answered
(31 responses)- A81% (25)
- B6% (2)
- C3% (1)
- D10% (3)
Explanation
Conducting a Privacy Impact Assessment (PIA) during the development stage of the SDLC is most critical because this is when the detailed technical design, data flows, storage mechanisms, and processing logic are being actively defined and coded. Identifying privacy risks at this stage allows architects and developers to incorporate privacy-by-design controls before the system's structure is solidified. Changes made during development are far less costly than retrofitting privacy controls after implementation (B) or testing (C). While planning (D) sets the project scope, the granular data handling decisions that a PIA must evaluate are typically not yet defined at that stage.
Topics
Community Discussion
No community discussion yet for this question.