Question

A privacy solutions engineer is designing controls for a customer-support platform that routinely shares subsets of customer records with an outsourced analytics team. During a review, the engineer finds that once records are exported to the analytics environment, there is no reliable way to determine who accessed which records, when, or for what stated purpose. The business wants to preserve the sharing arrangement but demonstrate accountability over the shared data. Which control should the engineer prioritize to close this gap?

Accepted Answer

Implement immutable access and processing logs in the analytics environment that record the identity, timestamp, records accessed, and processing purpose

Answer

Encrypt the exported records at rest in the analytics environment using organization-managed keys

Answer

Require the analytics team to sign a data processing agreement with confidentiality obligations before each export

Answer

Reduce the number of attributes shared with the analytics team to the minimum needed for the analysis