Exam CIPP-US topic 1 question 27 discussion

The answer is B. That is part of Build. The others are part of Discover.

The correct answer is B. However, B is required by the evolve, not build.

Phase 1: Discover Before DRAFTING OR UPDATING A PRIVACY POLICY, consider the company’s environment, information goals, and corporate culture. What laws regulate the company’s collection or use of information? Does the company wish to be AGGRESSIVE in its use of information? Does the company instead plan to be more cautious in its use of personal information to reduce legal and reputational risks or perhaps to achieve a competitive advantage as a privacy-sensitive leader? These goals serve as the foundation upon which the company’s policies are built. The successful privacy professional forges honest and open relationships with individuals ACROSS DEPARTMENTS. The participation of a range of departments, including legal, compliance, customer service, marketing, IT, HR, and sales is often BENEFICIAL in the creation of an information plan. The team should have the knowledge base and influence in the organization to determine and articulate the company’s current practices and future goals.

As explained by impchoi

Correct answer is "A".

The correct answer is C. The Discover Phase tasks include: self-assessing and identifying risk; classifying PI according to sensitivity; and developing & documenting best practices. C is the correct answer because C falls under the Build category, where the privacy team determines how best to meet goals by building a privacy program that both facilitates and restricts the flow of personal information, thus deciding how aggressive to be.