Certified Information Privacy Professional – United States (CIPP/US) — Question 25

A large online bookseller decides to contract with a vendor to manage Personal Information (PI). What is the least important factor for the company to consider when selecting the vendor?

Answer options

• A. The vendor’s reputation
• B. The vendor’s financial health
• C. The vendor’s employee retention rates
• D. The vendor’s employee training program

Correct answer: C

Explanation

The vendor's employee retention rates are the least critical factor because while it can reflect job satisfaction, it does not directly impact the security or management of Personal Information (PI). In contrast, the vendor’s reputation, financial stability, and training programs are more crucial as they directly influence the reliability and competence in handling sensitive data.