A data analyst needs to implement data governance in Adobe Real-Time CDP handling sensitive personal...

Implementing data governance for sensitive personal data in Adobe Real-Time CDP requires a multi-layered approach involving labeling, access control, and privacy management.

The first step is applyingData Usage Labels (Option D)to sensitive datasets. These labels (such as PII or Sensitive) allow the system to identify which data points are subject to specific privacy regulations and govern how they are activated to downstream destinations.

Secondly,stricter access control (Option E)must be implemented usingRole-Based Access Control (RBAC)andAttribute-Based Access Control (ABAC). RBAC manages what a user can do (permissions), while ABAC manages what data a user can see based on labels applied to schemas and fields. This ensures that only authorized personnel can view or manipulate sensitive financial or personal records.

Finally, for ongoing compliance with regulations like GDPR or CCPA, the analyst must be able to processPrivacy Job Requests (Option B). This involves using the Adobe Privacy Service to fulfill "Right to be Forgotten" or "Right to Access" requests by deleting or exporting specific profile data from the system. Option A is counterproductive as non-sensitive data is rarely the priority for governance, and Option C is an over-restriction that would prevent legitimate business operations; instead, the platform uses policies to selectively restrict exports based on labels.