Certified Information Privacy Technologist (CIPT) — Question 240

A company is implementing a new online application and the privacy technologist has advised about potential privacy implications. Who would most likely have final accountability if the recommendations made by the privacy technologist are implemented?

Answer options

• A. The Technology Owner.
• B. The Privacy Legal Team.
• C. The Risk (Business) Owner.
• D. The Chief Information Security Officer.

Correct answer: C

Explanation

The Risk (Business) Owner is ultimately responsible for ensuring that the business risks, including privacy implications, are managed effectively. While the Technology Owner and Privacy Legal Team provide input, and the Chief Information Security Officer focuses on security aspects, it is the Risk (Business) Owner who holds final accountability for decisions impacting the business operations.