Certified Information Privacy Technologist (CIPT) — Question 196

Which activity should the privacy technologist undertake to reduce potential privacy risk when evaluating options to process data in a country other than where it would be collected?

Answer options

• A. Review the Data Life Cycle
• B. Review data retention policies
• C. Create enterprise data flow diagrams
• D. Recommend controls for data transfers

Correct answer: D

Explanation

The correct answer is D because recommending controls for data transfers directly addresses the privacy risks associated with processing data in a different country. Options A, B, and C, while important for overall data management, do not specifically target the risks tied to cross-border data processing.