Q8
Single choice
A credit reporting agency collects personally identifiable information (Pll) from customers. The agency appoints a data protection officer (DPO), who is responsible for overseeing the agency's data protection strategy and enforcing data compliance requirements.
Which legislation should the DPO use as the basis for governing the collection and disclosure of Pll?