When evaluating cloud-based services for backup, which of the following is MOST important to consider from a privacy regulation standpoint?

When evaluating cloud-based services for backup, which of the following is MOST important to consider from a privacy regulation standpoint?
A . Data classification labeling
B . Data residing in another country
C . Volume of data stored
D . Privacy training for backup users

View Answer

Answer: B

Explanation:

Reference: https://www.isaca.org/resources/isaca-journal/past-issues/2014/selecting-the-right-cloud-operating-model-privacy-and-data-security-in-the-cloud

When evaluating cloud-based services for backup, one of the most important factors to consider from a privacy regulation standpoint is data residing in another country. This is because different countries may have different privacy laws and regulations that apply to the personal data stored or processed in their jurisdictions. Some countries may have more stringent or protective privacy laws than others, while some countries may have more intrusive or invasive practices that pose threats to data privacy. Therefore, an organization should be aware of the location of its cloud-based backup service provider and its servers, and ensure that there are adequate safeguards and agreements in place to protect the personal data from unauthorized or unlawful access, use, disclosure, or transfer.

Reference: CDPSE Review Manual (Digital Version), page 159