Question

An organization has decided to increase the amount of customer data it maintains and use it for targeted sales. The privacy officer has determined that this data is PII. Which type of assessment should be completed to ensure the organization is complying with applicable laws and regulationsrelated to this data?

Answer 1

Answer:

Privacy Impact Assessment (PIA)

Explanation:

If an organisation has decided to increase the amount of customer data it maintains and use it for targeted sales. The privacy officer having determined that this data is PII, then the type of assessment should be completed to ensure the organization is complying with applicable laws and regulationsrelated to this data is the Privacy Impact Assessment (PIA)

The assessment to be Conducted  -  Privacy Impact Assessment (PIA) is to determine, for each type or classification or PII (Personally Identifiable Information) , how it is collected, where it is stored, and how it is disposed of, as well as the potential security risks for each type of PII.