Certified Information Privacy Technologist (CIPT) — Question 127

A vendor has been collecting data under an old contract, not aligned with the practices of the organization.
Which is the preferred response?

Answer options

• A. Destroy the data
• B. Update the contract to bring the vendor into alignment.
• C. Continue the terms of the existing contract until it expires.
• D. Terminate the contract and begin a vendor selection process.

Correct answer: B

Explanation

The correct answer is B because updating the contract ensures the vendor's practices align with the organization's standards, promoting compliance and better data handling. Option A is inappropriate as destroying valuable data may not be necessary or justified. Option C fails to address the misalignment, and option D would unnecessarily disrupt the relationship without exploring potential improvements through contract updates.