Certified Information Privacy Manager (CIPM) — Question 89

When building a data privacy program, what is a good starting point to understand the scope of privacy program needs?

Answer options

• A. Perform Data Protection Impact Assessments (DPIAs).
• B. Perform Risk Assessments
• C. Complete a Data Inventory.
• D. Review Audits.

Correct answer: C

Explanation

Completing a Data Inventory is crucial as it helps identify what personal data is held, where it is stored, and how it is used, which is essential for establishing the scope of privacy program needs. While Risk Assessments, DPIAs, and Audits are important, they are more effective after the data inventory has been completed to inform those processes.