Certified Information Privacy Manager (CIPM) — Question 23

Which of the documents below assists the Privacy Manager in identifying and responding to a request from an individual about what personal information the organization holds about them with whom the information is shared?

Answer options

• A. Risk register
• B. Privacy policy
• C. Records retention schedule
• D. Personal information inventory

Correct answer: D

Explanation

The correct answer, D, is a Personal information inventory, which specifically catalogs the personal data held by the organization and its sharing practices. The other options, such as the Risk register, Privacy policy, and Records retention schedule, do not provide the necessary details for responding to individual requests about personal information.