Explanation
Cryptographic erasure is a data sanitization method that uses encryption to render data unreadable and unrecoverable. It is the best method when there is a need to balance the destruction of data and the ability to recycle IT assets, because it does not damage the storage media and allows it to be reused or sold. It is also faster and more environmentally friendly than physical destruction methods.
References:
* ISACA Certified Data Privacy Solutions Engineer (CDPSE) Exam Content Outline, Domain 2: Privacy Architecture, Task 2.4: Implement data sanitization methods to ensure data privacy and security, Subtask 2.4.1: Select appropriate data sanitization methods based on the type of data and storage media.
* What is Data Sanitization? | Data Erasure Methods | Imperva

Explanation
A privacy impact assessment (PIA) is a process of analyzing the potential privacy risks and impacts of collecting, using, and disclosing personal data. A PIA should be conducted when there is a change in the data processing activities that may affect the privacy of individuals or the compliance with data protection laws and regulations. One of the scenarios that should trigger the completion of a PIA is when there are new inter-organizational data flows, which means that personal data is shared or transferred between different entities or jurisdictions. This may introduce new privacy risks, such as unauthorized access, misuse, or breach of data, as well as new legal obligations, such as obtaining consent, ensuring adequate safeguards, or notifying authorities.
References:
* PIA Triggers - International Association of Privacy Professionals
* Privacy Impact Assessment - International Association of Privacy Professionals
* GDPR Privacy Impact Assessment
* Data Protection Impact Assessment triggers: Clarity or confusion?