A resident asks what personal data the city holds about them. Which governance capability should respond?
Select an answer to reveal the explanation.
Short Explanation
When someone asks 'what do you have on me,' you need a map and a process—not a shrug. Inventory plus a playbook lets the city find and answer without a scavenger hunt. Subject requests are governance muscle, not a favor.
Full Explanation
Privacy-aware governance includes knowing where personal data resides and how to respond to access or similar requests within policy and legal timelines. Absence of inventory, dumping unrelated content, or shifting the burden to the requester fails municipal duty of care. Processes should combine catalog/inventory, verified identity handling, and coordinated response across departments. This is foundational for GDPR/CCPA-style awareness at city depth.