Which of the following actions is NOT required during a data privacy diligence process for...

A privacy readiness assessment is not required during a data privacy diligence process for Merger & Acquisition (M&A) deals, as it is usually done before the deal to evaluate the privacy maturity and compliance level of the target organization. The other options are required during the data privacy diligence process to ensure that the personal data of both organizations are handled in accordance with the applicable laws and regulations, as well as the expectations of the data subjects and stakeholders. References: CIPM Body of Knowledge, Domain III: Privacy Program Management Activities, Task 4: Manage data transfers.