CIPM Exam QuestionsBrowse all questions from this exam

CIPM Exam - Question 128


Which of the following actions is NOT required during a data privacy diligence process for Merger & Acquisition (M&A) deals?

Show Answer
Correct Answer: B

Updating business processes to handle Data Subject Requests (DSRs) is not required during the data privacy diligence process for Merger & Acquisition (M&A) deals. This action is typically performed after the acquisition to align the processes of the merged entities. The diligence process focuses on understanding the current state of data privacy practices, risks, and liabilities, rather than making procedural updates.

Discussion

5 comments
Sign in to comment
SsouravOption: B
Sep 14, 2023

B. Update business processes to handle Data Subject Requests (DSRs). In a Merger & Acquisition (M&A) context, the due diligence process primarily focuses on understanding the current state of the company being acquired, including its data privacy practices, risks, and liabilities. Updating business processes to handle Data Subject Requests would be an action taken post-acquisition to align the processes of the two merged entities.

Alex951Option: B
Jun 14, 2023

Shouldn't be D, should be B. Not important for a process update at that stage

emily0922Option: B
Aug 15, 2023

Should be B, update should be done after

carlosbuiOption: B
Nov 26, 2023

should be B

[Removed]Option: B
Sep 3, 2023

Should be B