Question

During a review of a retailer's website, a privacy solutions engineer discovers that the current data flow diagrams do not reflect several third-party JavaScript tags (advertising and analytics pixels) that transmit visitor identifiers to external vendors. Marketing added these tags directly through the tag manager without notifying privacy or IT. What is the MOST important reason to update the data flow diagrams to capture these tags before taking other action?

Accepted Answer

Undocumented client-side data flows represent unmapped disclosures of personal data to processors and third parties that must be understood to assess purpose, legal basis, and downstream controls

Answer

The diagrams must show every technology component to satisfy software asset management inventories

Answer

Tag managers slow page load times and the diagrams help identify performance bottlenecks

Answer

The diagrams are needed to renegotiate the advertising vendor contracts at a lower cost