A company collects personal information about its employees and requests them to provide accurate
information in order to avail benefits such as life insurance and medical insurance. Employees of the company
have raised concerns about use of their personal information. Due to the concerns, the company has decided to
create a privacy policy. What all should the company include in its privacy policy to address the raised
concerns?

Which of the following factor is least likely to be considered while implementing or augmenting data security
solution for privacy protection:

Which of the following are key contributors that would enhance the complexity in implementing security measures for protection personal information?

BS 10012 is a British standard used to establish ___________.

A Business Process Management (BPM) organization based in India, has many domestic clients. The organization observes that one of its domestic clients does not appreciate the value of customers' personal information and have a lot of system loop holes that can be exploited to breach privacy of its customers. The contract signed with the said client makes the BPM organization 100% liable for privacy breaches. The BPM organization has paid close to $10,000 in fines as penalty to the said client in the past. The privacy office has highlighted the risk to the senior management of the BPM organization. What is the best possible approach that the BPM organization can take to resolve this issue?