Certified Information Privacy Manager (CIPM) — Question 111

A Privacy Threshold Analysis (PTA), Privacy Impact Assessment (PIA) and Data Protection Impact Assessment (DPIA) are conducted during what phase of a System Development Life Cycle (SDLC)?

Answer options

• A. Testing.
• B. Design.
• C. Deployment.
• D. Maintenance.

Correct answer: B

Explanation

The correct answer is B, as these assessments are integral to the design phase to ensure privacy considerations are incorporated early in the development process. The other phases, such as Testing, Deployment, and Maintenance, focus more on implementation and operational aspects rather than initial privacy assessments.