Exam CDPSE topic 1 question 38 discussion

I would go with C. Following an established privacy framework provides a structured approach to developing a data privacy program. Frameworks like the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or industry-specific standards (e.g., ISO/IEC 27001, NIST Privacy Framework) outline best practices, legal requirements, and compliance measures that help organizations systematically address data privacy concerns. By using a recognized framework, organizations can ensure they are meeting regulatory obligations, implementing appropriate controls, and adopting industry best practices. However, Profiling current data use is valuable for understanding how data is handled within the organization, but it should be part of the overall framework rather than the primary focus.

Profiling current data use means mapping out where personal data is collected, how it's processed, stored, shared, and with whom.

Correct answer is C - Following an established privacy framework Privacy frameworks assist enterprise in achieving their objectives for the governance and management of enterprise IT, and all other types of information processing.