Question

A privacy engineer maintains data flow diagrams for a customer analytics platform. The platform team has just integrated a new third-party enrichment API that appends demographic attributes to existing customer records before they are loaded into the warehouse. The enrichment adds no new source systems, but the data now includes attributes not present in the original collection. What should the privacy engineer do FIRST to keep the data mapping accurate and support downstream lifecycle controls?

Accepted Answer

Update the data flow diagram to reflect the new enrichment step, the added attribute categories, and the resulting change in data elements flowing into the warehouse

Answer

Schedule the change for the next annual data mapping refresh since no new source systems were added

Answer

Immediately delete the enriched demographic attributes because they were not part of the original collection

Answer

Notify affected customers that additional attributes are now stored before documenting the change internally