There has been a recent security breach which has led to the release of sensitive customer
information. As part of improving security and reducing the disclosure of customer data, a training
company has been employed to educate staff. Which of the following should be the primary focus
of the privacy compliance training program?

A.
Explain how customer data is gathered, used, disclosed, and managed.

B.
Remind staff of the company’s data handling policy and have staff sign an NDA.

C.
Focus on explaining the “how” and “why” customer data is being collected.

D.
Republish the data classification and the confidentiality policy.