Certified Information Privacy Manager (CIPM) — Question 172

Which of the following is least relevant to establishing a culture of data privacy at a company?

Answer options

• A. Securing funding for a privacy program.
• B. Deploying training and awareness.
• C. Adopting Privacy by Design (PbD).
• D. Monitoring compliance.

Correct answer: A

Explanation

Securing funding for a privacy program is necessary for implementation but does not directly influence the culture of data privacy within the company. In contrast, deploying training and awareness, adopting Privacy by Design (PbD), and monitoring compliance are all actions that actively foster a culture of privacy and ensure that employees prioritize data protection in their daily activities.