Certified Information Privacy Manager (CIPM) — Question 99

Which aspect of a privacy program can best aid an organization’s response time to a Data Subject Access Request (DSAR)?

Answer options

• A. Conducting privacy training.
• B. Maintaining a written DSAR policy.
• C. Creating a comprehensive data inventory.
• D. Implementing Privacy Impact Assessment (PIAs).

Correct answer: C

Explanation

Creating a comprehensive data inventory is crucial because it allows an organization to quickly identify and access the personal data requested in a DSAR, thus streamlining the response process. In contrast, while conducting privacy training, maintaining a written DSAR policy, and implementing PIAs are important elements of a privacy program, they do not directly enhance the efficiency of responding to specific data requests.