Which of the following is the GREATEST obstacle to conducting a privacy impact assessment (PIA)?

Which of the following is the GREATEST obstacle to conducting a privacy impact assessment (PIA)?

A. Conducting a PIA requires significant funding and resources.

B. PIAs need to be performed many times in a year.

C. The organization lacks knowledge of PIA methodology.

D. The value proposition of a PIA is not understood by management.

View Answer

Answer: D

Explanation:

The value proposition of a PIA is not understood by management is the greatest obstacle to conducting a PIA, as it may result in lack of support, funding, resources or commitment for the PIA process and outcomes. Management may not appreciate or recognize the benefits of a PIA, such as enhancing privacy protection, reducing privacy risks and costs, increasing customer trust and satisfaction, and complying with privacy laws and regulations. Management may also perceive a PIA as a burden, a delay or a hindrance to the system or project development and delivery. The other options are not as significant as the value proposition of a PIA is not understood by management as obstacles to conducting a PIA. Conducting a PIA requires significant funding and resources is an obstacle to conducting a PIA, but it may be overcome by demonstrating the return on investment or the cost-benefit analysis of a PIA. PIAs need to be performed many times in a year is an obstacle to conducting a PIA, but it may be mitigated by adopting a scalable or modular approach to PIAs that can be tailored to different types or levels of systems or projects. The organization lacks knowledge of PIA methodology is an obstacle to conducting a PIA, but it may be resolved by acquiring or developing the necessary skills, tools or guidance for performing PIAs1, p. 67-68

Reference: 1: CDPSE Review Manual (Digital Version)