Module 1: Foundation Principles

Question 1

Privacy Technologist

Answer 1

referred to a variety of professionals that play a role in protecting privacy:

• Technology professionals including audit, risk and compliance managers,
• Data professionals, including data architects and data scientists,
• System designers and developers including software engineers and privacy engineers

Question 2

Privacy Policy

Answer 2

Internal document that governs how company is handling personal information. It serves as a guide for all organisational activities and drives the commitments made within the privacy notice (eg data classification system, collection principles, retention, how data should be protected, handling DSRs etc)

It should be written before privacy notice because notice is reflection of an organisation’s privacy policy

Question 3

Privacy Notice

Answer 3

An external document that describes how an organisation collects, uses, retains and discloses personal information.