Certified Data Privacy Solutions Engineer (CDPSE) — Question 21

An organization decides to outsource its customer personal data analytics to a third party to understand spending habits. Which of the following is the MOST important contractual consideration?

Answer options

• A. Platform architecture used to process the data
• B. Terms for continuous monitoring of the vendor
• C. Clearly defined data responsibilities of all parties
• D. The vendor's vulnerability management program

Correct answer: C

Explanation

The correct answer is C because clearly defining the data responsibilities of all parties ensures accountability and compliance with data protection regulations. While the other options may be important, they do not directly address the need for clarity in data handling responsibilities, which is essential for protecting customer personal data.