Certified Data Privacy Solutions Engineer (CDPSE) — Question 132

A data processor that handles personal data for multiple customers has decided to migrate its data warehouse to a third-party provider. What is the processor obligated to do prior to implementation?

Answer options

• A. Seek approval from all in-scope data controllers.
• B. Ensure data retention periods are documented.
• C. Obtain assurance that data subject requests will continue to be handled appropriately.
• D. Implement comparable industry-standard data encryption in the new data warehouse.

Correct answer: A

Explanation

The correct answer is A because a data processor must seek approval from all in-scope data controllers before making changes to how personal data is handled. Options B, C, and D, while important, do not address the immediate obligation to obtain consent from data controllers regarding the migration.