Question

A multinational retailer is establishing formal privacy governance. Privacy responsibilities are currently scattered across legal, IT security, marketing, and HR, resulting in inconsistent decisions and duplicated efforts. The newly appointed privacy leader wants a sustainable structure to coordinate privacy decisions across these functions while ensuring decisions remain aligned with the organization's overall privacy strategy. Which action BEST addresses this need?

Accepted Answer

Establish a cross-functional privacy steering committee with defined charter, membership, and decision authority

Answer

Require each department to appoint its own independent privacy officer with autonomous decision-making authority

Answer

Purchase a privacy management platform to automate compliance tasks across all departments

Answer

Consolidate all privacy activities under the IT security team to leverage existing controls