Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The most important consideration when establishing a data privacy program is defining the organization's role as a controller or processor. These roles, as outlined in privacy regulations such as the General Data Protection Regulation (GDPR), determine the responsibilities regarding the handling of personal data. A controller is responsible for determining the purpose and means of data processing, while a processor acts on behalf of the controller.
https://www.professormesser.com/security-plus/sy0-701/sy0-701-video/privacy-sy0-701/
Between the two options, C. Role as controller or processor remains the most important consideration. This distinction fundamentally shapes the organization’s responsibilities and compliance requirements under data protection laws. However, the request process for data subject access is also crucial, as it directly impacts how the organization responds to individuals’ rights regarding their personal data. Both aspects are important, but understanding the role as a controller or processor is foundational.