Question 13
Domain 3: Assessing Personal Data and Processing ActivitiesA privacy team is updating its record of processing activities for a customer support system. To keep the record useful and complete, which set of related artifacts should the team connect to that record?
Correct answer: B
Explanation
Records of processing should be linked to the related documentation that explains disclosures, evaluates impacts, governs retention, and identifies third-party involvement. — Connect records to notices, assessments, retention rules and vendor information.
Why each option is right or wrong
A. Data inventories, training logs, audit calendars, and budget approvals
The specified linked artifacts are notices, assessments, retention rules, and vendor information.
B. Notices, assessments, retention rules, and vendor information
The source states that records should be connected to notices, assessments, retention rules, and vendor information. In this scenario, linking those four artifact types makes the processing record complete and tied to the related documentation for the customer support system.
C. Consent forms, access logs, incident tickets, and encryption settings
The required linked artifacts are notices, assessments, retention rules, and vendor information.
D. Policies, job descriptions, asset tags, and system passwords
The connection requirement names notices, assessments, retention rules, and vendor information.