A change to an IT system affects personal data processing. Under US privacy frameworks, a change agent should ensure:
-
A
The change is only reviewed by the IT department
-
B
A privacy impact assessment is completed before implementation
-
C
Customers are notified only after the change is live
-
D
Legal counsel signs off without any technical review