Certified Data Privacy Solutions Engineer (CDPSE) — Question 149

To ensure the protection of personal data, privacy policies should mandate that access to information system applications be authorized by the:

Answer options

• A. database administrator (DBA).
• B. chief information officer (CIO).
• C. general counsel.
• D. business application owner.

Correct answer: D

Explanation

The business application owner is responsible for managing access to their specific applications and ensuring that user permissions align with privacy policies. The other options, while important in their roles, do not typically have direct authority over application access controls.