Ch 4 - Data Inventory

Question 1

an analysis of the privacy risks associated with processing personal information in relation to a project, product or service

Answer 1

Privacy Impact Assessment

Question 2

When should you do a PIA?

Answer 2

Early. In other words:
Prior to deployment of a project, product or service that involves the collection of personal information
When there are new or revised industry standards, organizational policies, or laws and regulations
When the organization creates new privacy risks through changes to methods by which personal information is handled

Question 3

Data inventory

Answer 3

also known as a data map, provides answers to these questions by identifying the data as it moves across various systems, and thus indicating how it is shared and organized and where it is located.

Question 4

Tools to update data inventory

Answer 4

spreadsheets, a governance, risk and compliance (GRC) software system, an internally developed system or another product.

Question 5

Privacy assessment

Answer 5

measure an organization’s compliance with laws, regulations, adopted standards and internal policies and procedures.