Question

A privacy solutions engineer is reviewing a newly created data flow diagram for a customer loyalty program. The diagram accurately depicts systems, storage locations, and cross-border transfers. However, during review the engineer notices that one downstream analytics platform receives transaction data that was originally collected only to process reward redemptions. What is the engineer's MOST important next action based on this observation?

Accepted Answer

Determine whether the analytics use is compatible with the original collection purpose and whether an appropriate legal basis exists

Answer

Update the data flow diagram to add the analytics platform as an approved recipient so the documentation stays current

Answer

Encrypt the transaction data in transit to the analytics platform to reduce the risk of interception

Answer

Increase the retention period for the analytics platform to support longer-term trend reporting