Which of the following should internal auditors be attentive of when reviewing personal data consent and opt-in/opt-out management process?

Which of the following should internal auditors be attentive of when reviewing personal data consent and opt-in/opt-out management process?
A . Whether customers are asked to renew their consent for their data processing at least quarterly.
B. Whether private data is processed in accordance with the purpose for which the consent was obtained?
C. Whether the organization has established explicit and entitywide policies on data transfer to third parties.
D. Whether customers have an opportunity to opt-out the right to be forgotten from organizational records and systems.

View Answer

Answer: C