Certified Information Privacy Professional – United States (CIPP/US) — Question 110

What is the most important action an organization can take to comply with the FTC position on retroactive changes to a privacy policy?

Answer options

• A. Describing the policy changes on its website.
• B. Obtaining affirmative consent from its customers.
• C. Publicizing the policy changes through social media.
• D. Reassuring customers of the security of their information.

Correct answer: B

Explanation

The correct answer, B, is essential because obtaining affirmative consent ensures that customers are aware of and agree to the changes being made to the privacy policy. The other options, while they may inform customers, do not legally protect the organization from non-compliance with FTC guidelines regarding retroactive policy changes.