Which Privacy Code Principle mandates making information about policies and practices regarding personal information readily available to consumers?

• A. Consumer Access to Personal Information
• B. Accuracy of Personal Information
• C. Challenging Compliance
• D. Openness Concerning Policies and Practices

Answer: (D)

Openness Concerning Policies and Practices is the principle that requires an organization to publish and make readily available information about its privacy policies and handling of personal data. This ensures consumers can see, in plain terms, how their information is collected, used, disclosed, and protected, as well as how to contact the organization and where to find the privacy rights it supports. That visibility helps individuals understand what to expect and how to exercise their rights.

The other principles focus on different rights: consumer access to personal information deals with obtaining access to one’s own data; accuracy concerns keeping information correct; challenging compliance relates to how to question or verify the organization’s privacy practices. None of these mandate posting the organization’s policies and practices, so openness about policies and practices is the correct fit for making that information readily available.