Which of the following is least relevant to establishing a culture of data privacy at a company?
Which of the following is least relevant to establishing a culture of data privacy at a company?
The correct answer should be D: establishing a culture of data privacy requires training and awareness, which can be offered by securing the necessary funding. Privacy by Design is essential, while monitoring compliance is only useful for reviewing the maturity and not for establishing a culture.
While securing funding is important for building or running a privacy program, funding alone does not create a culture of privacy. Culture is about people’s attitudes, behaviors, and daily practices around privacy.