Certified Information Privacy Manager (CIPM) — Question 92

What is most critical when outsourcing data destruction service?

Answer options

• A. Obtain a certificate of data destruction.
• B. Confirm data destruction must be done on-site.
• C. Conduct an annual in-person audit of the provider’s facilities.
• D. Ensure that they keep an asset inventory of the original data.

Correct answer: A

Explanation

Obtaining a certificate of data destruction is crucial as it serves as proof that the data has been securely destroyed and meets compliance standards. While confirming on-site destruction, conducting audits, and maintaining an asset inventory are important, they do not provide the same level of assurance regarding the successful and compliant handling of sensitive data.