Which policy governs member privacy and data handling for events or communications?

• A. Privacy and data protection policy.
• B. Code of conduct policy.
• C. Financial controls policy.
• D. Social media policy.

Answer: (A)

The main concept being tested is which policy directly governs how member privacy and data are handled for events or communications. A privacy and data protection policy is the one that sets the rules for collecting, storing, using, sharing, and protecting personal information, including consent, access rights, retention periods, and how to respond to data breaches. It scopes who may access data, how it can be used for communications or event logistics, and how members can exercise their privacy rights.

Think of it in the context of planning events: you might collect names and email addresses to send updates and schedules. The privacy and data protection policy tells you how that information is stored securely, who can access it, how long you keep it, and how you obtain permission to use it. Other policies address different areas: the code of conduct governs behavior and ethics; the financial controls policy handles money and budgeting; the social media policy guides online posting. They don’t specifically regulate the lifecycle of member data for events and communications, which is why privacy and data protection is the correct choice.