The primary consideration of a multinational organization deploying a user and entity behavior
analytics (UEBA) tool to centralize the monitoring of anomalous employee behavior is cross-border
data transfer, because it may involve the transfer of personal data across different jurisdictions with
different privacy laws and regulations. The organization needs to ensure that it complies with the
applicable legal requirements and safeguards the privacy rights of its employees when transferring
their data to a central location for analysis. The other options are secondary or operational
considerations that may not have a significant impact on the privacy of the employees.
Reference:
CDPSE Exam Content Outline, Domain 2 – Privacy Architecture (Privacy Architecture
Implementation), Task 3: Implement privacy solutions1.
CDPSE Review Manual, Chapter 2 – Privacy Architecture, Section 2.4 – Cross-Border Data Transfer2.
CDPSE Certified Data Privacy Solutions Engineer All-in-One Exam Guide, Chapter 2 – Privacy
Architecture, Section 2.5 – Cross-Border Data Transfer3.