An organization wants to change the originally specified purpose of collected personal data. What must be done NEXT?

A. Notify data protection authorities.

B. Obtain consent from data subjects.

C. Update the enterprise data architecture.

D. Revise the privacy notice.








 

Suggested Answer: D





This question is in CDPSE Certified Data Privacy Solutions Engineer Exam
For getting Certified Data Privacy Solutions Engineer (CDPSE)










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.