Which of the following is a PRIMARY objective of privacy impact assessments (PIAs)?

While PIAs may uncover threats, their primary focus is on privacy risks specifically related to personal information, not general business process threats.

Identifying risk when personal information is collected is part of a PIA, but the overarching objective is achieving and demonstrating compliance with regulations.

While senior management approval is important, it is an outcome or prerequisite, not the primary objective of the assessment itself.

PIAs are systematic processes designed to identify and assess the privacy risks associated with new projects, systems, or processes that involve personal data, specifically to ensure that the handling of personal information adheres to legal and regulatory privacy requirements like GDPR or CCPA. They help demonstrate accountability and compliance with data protection principles.