Certified Information Privacy Manager (CIPM) — Question 20

What does it mean to “rationalize” data protection requirements?

Answer options

• A. Evaluate the costs and risks of applicable laws and regulations and address those that have the greatest penalties
• B. Look for overlaps in laws and regulations from which a common solution can be developed
• C. Determine where laws and regulations are redundant in order to eliminate some from requiring compliance
• D. Address the less stringent laws and regulations, and inform stakeholders why they are applicable

Correct answer: B

Explanation

The correct answer is B because rationalizing data protection requirements involves identifying overlaps in regulations to streamline compliance. Option A focuses on penalties rather than overlaps, C discusses redundancy but does not emphasize creating a common solution, and D addresses leniency instead of rationalization.