Which of the following should be the FIRST step when conducting a privacy impact assessment (PIA) for a new enterprise system?

Practise this CDPSE Data Privacy Exam Prep I question free, then download the PDF, watch the video walkthrough, or unlock timed mock exams for the full web bank.

Download PDF Watch video

Multiple choice — select the best answer

ADetermine the legal and regulatory requirements applicable to the system
BIdentify the personal and sensitive data that will be collected and processed
CAssess the potential privacy risks and mitigation strategies
DDocument the PIA findings and recommended controls

✓ Correct answer: B. Identify the personal and sensitive data that will be collected and processed Identifying the personal and sensitive data that will be collected and processed by the system should be the first step when conducting a PIA.

.q-expl{display:block!important}.q-opt[data-idx="1"]{border-color:#16a34a;background:#f0fdf4}.q-opt[data-idx="1"] .oltr{background:#16a34a;color:#fff}.q-opt{cursor:default!important;pointer-events:none}

Keep practising. Use the free CDPSE Data Privacy Exam Prep I PDF, watch the YouTube walkthrough, or unlock all 10 web questions with timed mock exams.

Free PDF Video walkthrough

← Previous Next → 🎲 Random question ↩ Back to all questions

Keep practising

Which of the following should be the FIRST step when conducting a privacy impact assessment (PIA) for a new enterprise system?

Related questions

Free practice here. Timed mocks when you are ready.