Certified Information Privacy Technologist (CIPT) — Question 3

Which of the following would best improve an organization' s system of limiting data use?

Answer options

• A. Implementing digital rights management technology.
• B. Confirming implied consent for any secondary use of data.
• C. Applying audit trails to resources to monitor company personnel.
• D. Instituting a system of user authentication for company personnel.

Correct answer: C

Explanation

Applying audit trails allows the organization to track and monitor how data is accessed and used by personnel, thus effectively limiting misuse. While implementing digital rights management and user authentication are important, they do not provide the same level of oversight as audit trails. Confirming implied consent for secondary data use does not directly enforce limitations on data usage.