Certified Data Privacy Solutions Engineer (CDPSE) — Question 62

Which party should data subject contact FIRST if they believe their personal information has been collected and used without consent?

Answer options

• A. Privacy rights advocate
• B. Outside privacy counsel
• C. Data protection authorities
• D. The organization’s chief privacy officer (CPO)

Correct answer: C

Explanation

The correct answer is C, as data protection authorities are typically the first point of contact for individuals who suspect misuse of their personal information. They have the authority to investigate and enforce privacy laws, unlike privacy advocates or outside legal counsel, who may provide support but lack regulatory power.