Certified Information Privacy Technologist (CIPT) — Question 50

Which of the following are the mandatory pieces of information to be included in the documentation of records of processing activities for an organization that processes personal data on behalf of another organization?

Answer options

• A. Copies of the consent forms from each data subject.
• B. Time limits for erasure of different categories of data.
• C. Contact details of the processor and Data Protection Offer (DPO).
• D. Descriptions of the processing activities and relevant data subjects.

Correct answer: D

Explanation

The correct answer is D because it is crucial to include descriptions of the processing activities and the relevant data subjects in the documentation of processing activities. Options A, B, and C, while potentially important, are not mandatory requirements in the documentation as per data protection regulations.