Question 36
Domain 5 — Privacy Operations, Incident Response, and Continuous ImprovementWhich of the following processes BEST enables an organization to maintain the quality of personal data?
Correct answer: D
Explanation
Updating the data quality standard through periodic review keeps quality requirements current and ensures personal data remains accurate, complete, and fit for use. A maintained standard provides an ongoing benchmark for checking data quality, so regular review is the process that best supports sustained quality over time.
Why each option is right or wrong
A. Implementing routine automatic validation
Automatic validation checks data against existing rules, but does not keep those rules current.
B. Maintaining hashes to detect changes in data
Hashes help detect whether data changed, not whether the data is accurate or complete.
C. Encrypting personal data at rest
Encryption protects confidentiality at rest, but it does not improve data quality.
D. Updating the data quality standard through periodic review
Under GDPR Article 5(1)(d), personal data must be accurate and, where necessary, kept up to date; Article 5(2) then places accountability on the controller to demonstrate compliance. A periodic review of the data quality standard is the control that keeps the organization’s benchmark current against changing business rules, data uses, and error patterns, so it directly supports ongoing accuracy and completeness rather than a one-time cleanup.