A compliance officer discovers that the ethics hotline vendor has been logging caller metadata without authorization. What is the MOST appropriate immediate action?
-
A
Terminate the vendor contract immediately
-
B
Suspend hotline operations and notify the board audit committee
-
C
Conduct an internal investigation before taking any action
-
D
Issue a public statement about the data breach