Certified Data Privacy Solutions Engineer (CDPSE) — Question 176

Which of the following is the BEST indication that an organization needs to perform a privacy impact assessment (PIA)?

Answer options

• A. The privacy policy is included in an online training course.
• B. An inventory of personal information is reported to stakeholders.
• C. The privacy practices are being reviewed by clients.
• D. New personal information categories are being collected about customers.

Correct answer: D

Explanation

The correct answer is D because the collection of new categories of personal information may introduce new risks and requires a thorough assessment to ensure compliance and protection of privacy. The other options, while relevant to privacy practices, do not indicate a pressing need to conduct a PIA as they do not involve changes to information collection.