Certified Internal Auditor (CIA) Part 3: Business Knowledge for Internal Auditing — Question 201

An internal auditor conducts a data privacy audit engagement. Which of the following will most likely be treated as personal information?

Answer options

• A. Behavioral information.
• B. Internet protocol (IP) addresses.
• C. Device types being used.
• D. Mobile device unique identifiers.

Correct answer: B

Explanation

The correct answer is B, as Internet protocol (IP) addresses can be linked to an individual user and thus are considered personal information. Options A, C, and D may not necessarily identify a specific individual directly, making them less likely to be treated as personal information in this context.