Certified Information Privacy Manager (CIPM) — Question 151

Which is the best first step in establishing a baseline regarding privacy in an organization?

Answer options

• A. Interviewing the organization's top decision-makers.
• B. Surveying shareholders on their knowledge of privacy.
• C. Collecting information on the organization's compliance with privacy regulations and standards.
• D. Designating a person responsible for the development and implementation of the organization's privacy program.

Correct answer: C

Explanation

The correct answer, C, is crucial because understanding current compliance with privacy regulations provides a solid foundation for establishing a privacy baseline. Options A and B focus on gathering opinions rather than factual compliance data, and option D, while important, is more about assigning responsibility rather than assessing the current state of privacy practices.