Incorporating privacy checkpoints into the secure development life cycle (SDLC) is the best way to avoid collecting personal data that was not part of the privacy impact assessment (PIA). Privacy checkpoints are stages in the SDLC where privacy requirements and risks are reviewed and validated, and any changes or deviations from the original PIA are identified and addressed. Privacy checkpoints help ensure that privacy is embedded throughout the system design and development, and that any changes are documented and approved.
Reference:
ISACA, CDPSE Review Manual 2021, Chapter 3: Privacy by Design, Section 3.2: Privacy Engineering, p. 97-98.

Irreversible disposal is a process of removing or destroying data from a storage device or media to prevent unauthorized access or recovery of the data. Irreversible disposal is the most important thing to establish within a data storage policy to protect data privacy, as it reflects the principles of data minimization and storage limitation, which require limiting the collection, storage and processing of personal data to what is necessary and relevant for the intended purposes, and deleting or disposing of personal data when it is no longer needed or justified. Irreversible disposal also helps to reduce the privacy risks and costs associated with data storage and retention, such as data breaches, unauthorized access, misuse or loss of data. The other options are not as important as irreversible disposal in protecting data privacy within a data storage policy. Data redaction is a technique that removes or obscures sensitive or confidential information from a document or file, but it does not address the issue of data retention or deletion. Data quality assurance (QA) is a process of ensuring that the data meets the standards and specifications of accuracy, completeness, consistency and reliability, but it does not address the issue of data retention or deletion. Collection limitation is a principle that requires limiting the collection of personal data to what is necessary and relevant for the intended purposes, but it does not address the issue of data retention or deletion1, p. 75-76 Reference: 1: CDPSE Review Manual (Digital Version)

One of the foundational goals of data privacy laws is to give people rights over the collection of personal data, such as the right to access, correct, delete, or object to the processing of their dat a. Privacy laws also aim to protect people's dignity, autonomy, and self-determination in relation to their personal data. The other options are not accurate or complete descriptions of the purpose of data privacy laws.
Reference:
CDPSE Review Manual, Chapter 1 - Privacy Governance, Section 1.1 - Privacy Principles1.
CDPSE Certified Data Privacy Solutions Engineer All-in-One Exam Guide, Chapter 1 - Privacy Governance, Section 1.2 - Data Privacy Laws and Regulations2.

The strategic goals of the organization should be established first before a privacy office starts to develop a data protection and privacy awareness campaign, because they provide the direction, purpose, and scope of the campaign. The strategic goals of the organization reflect its vision, mission, values, and objectives, as well as its alignment with the relevant privacy laws and regulations, stakeholder expectations, and industry best practices. The privacy office should design and implement the awareness campaign in a way that supports and promotes the strategic goals of the organization, as well as measures and evaluates its effectiveness and impact.
Reference:
CDPSE Review Manual, 2023 Edition, Domain 1: Privacy Governance, Section 1.1.2: Privacy Strategy Implementation, p. 19 CDPSE Review Manual, 2023 Edition, Domain 1: Privacy Governance, Section 1.3.2: Privacy Awareness and Training Program, p. 38-39 ICO launches data awareness campaign1

However, the risks associated with long-term retention have compelled organizations to consider alternatives; one is data archival, the process of preparing data for long-term storage. When organizations are bound by specific laws to retain data for many years, archival provides a viable opportunity to remove data from online transaction systems to other systems or media.
Data archiving is the process of moving data that is no longer actively used to a separate storage device for long-term retention. Data archiving helps to reduce the cost and complexity of data storage, improve the performance and availability of data systems, and comply with data retention policies and regulations. Data archiving should document controls relating to periods of retention for personal data, such as the criteria for determining the retention period, the procedures for deleting or anonymizing data after the retention period expires, and the mechanisms for ensuring the integrity and security of archived data. Reference: : CDPSE Review Manual (Digital Version), page 123