What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?

What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?
A . Distributing a privacy rights policy
B . Mailing rights documentation to customers
C . Publishing a privacy notice
D . Gaining consent when information is collected

View Answer

Answer: C

Explanation:

The primary means by which an organization communicates customer rights as it relates to the use of their personal information is publishing a privacy notice. A privacy notice is a document that informs the customers about how their personal information is collected, used, shared, stored, and protected by the organization, as well as what rights they have regarding their personal information, such as access, rectification, erasure, portability, objection, etc. A privacy notice should be clear, concise, transparent, and easily accessible to the customers, and should comply with the applicable privacy regulations and standards. A privacy notice helps to establish trust and transparency between the organization and the customers, and enables the customers to exercise their rights and choices over their personal information.

Reference: CDPSE Review Manual (Digital Version), page 39