Exam CIPM topic 1 question 177 discussion

If the company’s DPO has started to develop procedures but they are not fully documented, this could indeed signify an "Ad Hoc" stage in the process. As the program matures, the practices would typically become more defined, repeatable, and eventually, managed and measured for continual improvement.

The "Ad Hoc" level in the Privacy Maturity Model describes a situation where processes are often informal, undocumented, and reactive. Since the DPO failed to fully document the data retention process, it indicates that the company’s privacy practices are not yet systematically defined or consistently applied, fitting the characteristics of the "Ad Hoc" stage.

Repeatable, or maturity level two, similarly has procedures and processes, but they are not fully documented and do not cover all relevant aspects.

should be D

Should be D

Should be D

answer should be D Repeatable - Not fully documented & do no not covered all relevant aspects