Which of the following is the PRIMARY reason that organizations need to map the data flows of personal data?

Which of the following is the PRIMARY reason that organizations need to map the data flows of personal data?
A . To assess privacy risks
B . To evaluate effectiveness of data controls
C . To determine data integration gaps
D . To comply with regulations

View Answer

Answer: A

Explanation:

Data flow mapping is a technique to document how personal data flows within and outside an organization, including the sources, destinations, formats, purposes and legal bases of the data processing activities. Data flow mapping helps organizations to assess privacy risks, such as data breaches, unauthorized access, misuse or loss of data, and to implement appropriate controls to mitigate those risks. Data flow mapping may also help organizations to evaluate the effectiveness of data controls, determine data integration gaps and comply with regulations, but those are not the primary reasons for data flow mapping1, p. 69-70

Reference: 1: CDPSE Review Manual (Digital Version)