Certified Data Privacy Solutions Engineer (CDPSE) — Question 101

Which of the following is MOST important to ensure when developing a business case for the procurement of a new IT system that will process and store personal information?

Answer options

• A. The system architecture is clearly defined.
• B. A risk assessment has been completed.
• C. Security controls are clearly defined.
• D. Data protection requirements are included.

Correct answer: D

Explanation

Including data protection requirements is essential because it ensures compliance with legal and regulatory standards for handling personal information. While system architecture, risk assessment, and security controls are important, they do not directly address the legal obligations related to data privacy, which is crucial for protecting sensitive information.