Certified Data Privacy Solutions Engineer (CDPSE) — Question 85

A material finding related to the integrity of personal data was discovered during a privacy audit. Which of the following should the IT privacy practitioner do FIRST?

Answer options

• A. Discuss the matter with the board.
• B. Determine the impact to data subjects.
• C. Draft a corrective plan for management.
• D. Update the associated data privacy policy.

Correct answer: A

Explanation

The correct first step is to discuss the matter with the board, as they need to be informed about significant findings that could impact the organization. Determining the impact to data subjects, drafting a corrective plan, or updating policies are important but should come after the board is made aware of the issue to ensure proper oversight and resource allocation.