Certified in Risk and Information Systems Control (CRISC) — Question 457

An organization wants to launch a campaign to advertise a new product. Using data analytics, the campaign can be targeted to reach potential customers. Which of the following should be of GREATEST concern to the risk practitioner?

Answer options

• A. Purpose limitation
• B. Data minimization
• C. Accuracy
• D. Accountability

Correct answer: B

Explanation

Data minimization is crucial because it ensures that only the necessary data for the campaign is collected, reducing the risk of data breaches and compliance issues. While purpose limitation, accuracy, and accountability are important, they do not address the fundamental need to limit data collection to what is essential for the campaign.