Which authentication practice is being used when an organization requires a photo on a government-issued identification card to validate an in-person credit card purchase?

Data collected by a third-party vendor and provided back to the organization may not be protected according to the organization's privacy notice. Which of the following is the BEST way to address this concern?

Which of the following is an IT privacy practitioner's BEST recommendation to reduce privacy risk before an organization provides personal data to a third party?

During which of the following system lifecycle stages is it BEST to conduct a privacy impact assessment (PIA) on a system that holds personal data?

Which of the following should be done FIRST when developing an organization-wide strategy to address data privacy risk?