Exam CIPP-US topic 1 question 24 discussion

Should be C Effective management of user preferences can become quite challenging, especially for organizations that interact with their customers with multiple channels and for multiple products. The following are some of these challenges: The scope of an opt-out or another user preference can vary. As mentioned above, financial institutions must provide an opt-out by law prior to sharing personal information with third parties, but sharing with affliates can be done without offering such an opt-out. An organization must decide how broadly an opt-out or another user preference will apply.

As far as I am able to tell, this answer was determined by the the following from IAPP US Private Sector Privacy 3E Section 4.6.2: "Effective management of user preferences can become quite challenging, especially for organizations that interact with their customers with multiple channels and for multiple products." Nowhere does it state that this is the most challenging task businesses face. This is a subjective answer.

C seems like a technical challenge that is likely easily addressed. In contrast, D requires a legal determination of whether the information can be shared under the FCRA. Additionally, C is not unique to financial institutions...