Privacy Management Framework should include which of the following?

• A. Maintain personal data inventory
• B. Maintain marketing policy
• C. Maintain payroll
• D. Monitor system uptime

Answer: (A)

Visibility into the personal data you hold is the foundation of effective privacy governance. Maintaining a personal data inventory provides that visibility by listing what data is collected, where it resides, how it’s used, who has access, with whom it’s shared, and how long it’s kept. This inventory enables data mapping, risk assessments, DPIAs, and the ability to fulfill data subject rights, while supporting data minimization and retention controls. Without an up-to-date inventory, governance, compliance, and privacy risk management can’t be as effective.

Other options don’t establish this essential visibility and control over personal data: a marketing policy governs communications and consumer engagement, not the full scope of data handling; payroll pertains to a specific HR process, not the broader privacy governance framework; monitoring system uptime is an IT operations metric, not a privacy protection artifact.