Counsel asks which reports and datasets fall under a new state privacy act. What prerequisite must governance complete first?
Select an answer to reveal the explanation.
Short Explanation
You cannot protect what you have not found. Before answering the privacy-act question, inventory and classify—know what personal data you hold and which systems keep it.
Full Explanation
Regulatory response depends on knowing the location, nature, and sensitivity of personal data. Inventory and classification are prerequisites for scoping obligations, access controls, and retention under privacy laws. Without that map, compliance claims remain speculative.