A security engineer is configuring Microsoft Purview to track the consent and purpose limitation for personal data used in AI model training. The GDPR requires that data is only used for purposes consented to by data subjects. Which Microsoft Purview feature helps manage and demonstrate consent-based data processing compliance?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — c is correct because Microsoft Purview Privacy Risk Management (formerly Privacy Management) includes subject rights request management that enables organizations to honor data subjects' GDPR rights including access requests, deletion requests, and consent withdrawal. It helps organizations demonstrate compliance with consent-based processing by enabling systematic responses to subject rights requests and providing visibility into where personal data is processed.
Full explanation below image
Full Explanation
C is correct because Microsoft Purview Privacy Risk Management (formerly Privacy Management) includes subject rights request management that enables organizations to honor data subjects' GDPR rights including access requests, deletion requests, and consent withdrawal. It helps organizations demonstrate compliance with consent-based processing by enabling systematic responses to subject rights requests and providing visibility into where personal data is processed. A is incorrect because while Data Map allows custom attributes on data assets, it does not provide workflow for managing subject rights requests or consent lifecycle. B is incorrect because Compliance Manager tracks control implementation against regulations but does not manage individual data subject consent records or subject rights request workflows. D is incorrect because retention labels based on consent expiry manage data retention but do not address the broader consent management and subject rights fulfillment requirements.