Which of the following BEST ensures an organization takes a consistent approach to handling data subject rights requests?

Question

Options

• AEstablish a dedicated team to log all requests and responses.
• BProvide regular privacy awareness training to employees.
• CDevelop policies to govern the management of data processing preferences and requests.
• DCreate and track metrics related to data processing preferences and requests.

• A
  2% (1)
• B
  15% (7)
• C
  77% (37)
• D
  6% (3)

Explanation

Developing policies to govern the management of data subject rights requests provides the consistent, organization-wide framework that all employees and teams follow when responding to requests such as access, erasure, portability, and rectification. Policies define timelines, escalation paths, decision criteria, and documentation standards - ensuring every request is handled the same way regardless of who receives it. A dedicated logging team (A) is an operational implementation but without governing policies, consistency is not guaranteed. Awareness training (B) communicates procedures but cannot ensure consistency on its own. Tracking metrics (D) measures performance after the fact but does not establish the consistent approach in the first place.

No community discussion yet for this question.