Question

A privacy engineer discovers that PIAs at their organization are consistently initiated only after a new system has entered user acceptance testing, shortly before go-live. As a result, several projects have required costly rework to address privacy findings, and one launch was delayed. What is the MOST effective way to address this recurring problem?

Accepted Answer

Integrate a mandatory PIA threshold assessment as a gate within the project intake and design phases of the development lifecycle

Answer

Increase the staffing of the privacy team so PIAs can be completed faster during user acceptance testing

Answer

Require the DPO to grant conditional launch approvals with a commitment to remediate privacy findings post-implementation

Answer

Establish a service-level agreement requiring PIAs to be completed within five business days of a launch request