Minimize Effort for Former Employee Data Deletion

SC-400 By islever Editorial Last updated

Short answer

C Purchase a Microsoft Priva Subject Rights Requests license to enable the automated privacy workflow.

Question

You have a Microsoft 365 E5 subscription. Microsoft Priva Privacy Risk Management licenses are assigned to all users. You need to review and delete all the personal data that relates to a former employee. The solution must minimize administrative effort. What should you do first?
  1. Create a retention policy.
  2. Create an eDiscovery (Standard) case.
  3. Purchase a Microsoft Priva Subject Rights Requests license. Correct Answer
  4. From Data matching, add a personal data schema for the data profile.

Key Takeaways

Tests the distinction between standard eDiscovery workflows and privacy-specific Subject Rights Requests, highlighting that SRR is the intended tool for this scenario.

This SC-400 question addresses the initial step for reviewing and deleting a former employee's personal data with minimal administrative effort using Microsoft Priva.

Common mistake: Learners often select creating an eDiscovery case (B) because it is a standard compliance tool, failing to recognize that Priva Subject Rights Requests is the specialized solution for privacy inquiries.

Expert Analysis

Why the Answer Is Correct

The correct action is to ensure you have the necessary license, which involves purchasing or verifying the Microsoft Priva Subject Rights Requests license (Option C). The core of the question is minimizing administrative effort. Standard eDiscovery (Option B) requires manual setup, query creation, and review, which is labor-intensive. In contrast, Microsoft Priva’s Subject Rights Requests feature automates the collection and processing of data based on predefined schemas, significantly reducing admin overhead. Since the licenses are assigned to 'all users' but SRR is a premium add-on not included in base E5, ensuring the specific capability is licensed/active is the prerequisite first step to enabling the automated workflow.

Why the Other Options Are Wrong

Creating a retention policy (A) governs how long data is kept, not how to locate and delete it upon request. Creating an eDiscovery (Standard) case (B) is a valid way to find data but lacks the automation and privacy-specific features of Priva, leading to higher administrative effort. Adding a personal data schema (D) is part of the configuration process for Priva, but one must first ensure the service/license is active; furthermore, the question asks for the action to review and delete, implying the use of the request workflow rather than just schema definition.

Community Comment Notes

Community consensus strongly favors Option C. As user belyo noted, "Subject Rights Requests is an add-on not included in E3/E5 so you need to purchase it definitely." Another user, Glacierdk, confirmed via Copilot that SRR is the feature designed for this exact purpose to minimize effort. User Phil_79 raised a nuanced point about administrator vs. user requests, but acknowledged that SRR is the more suitable tool for handling such privacy-centric tasks efficiently compared to manual eDiscovery.

Exam Strategy

When a question emphasizes 'minimizing administrative effort' regarding privacy or data subject rights, look for Microsoft Priva solutions like Subject Rights Requests before standard eDiscovery tools. Always check if the required premium license is implied as a prerequisite.

Frequently Asked Questions

Why isn't eDiscovery (Standard) the best choice?

eDiscovery requires manual case setup and content search, increasing administrative effort. Priva SRR automates data discovery and response.

Is Priva included in Microsoft 365 E5?

Base Priva features may be included, but Subject Rights Requests is often a premium add-on or separate entitlement requiring explicit assignment/purchase.

More SC-400 FAQ →

Community Votes

C
80%
B
20%

80% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. Glacierdk 👍 2 Answered C
    Thinks its C From CoPilot: To review and delete all personal data related to a former employee with minimal administrative effort, you can use Microsoft Priva’s Subject Rights Requests feature. Here’s what you should do first: Create a Subject Rights Request: Go to the Microsoft Purview compliance portal. Navigate to Priva Privacy Risk Management > Subject Rights Requests. Select + New request and choose Delete as the request type. Specify the Employee’s Identity: Enter the former employee’s details to locate all personal data associated with them. Review the Data: Priva will compile the data related to the former employee. Review the data to ensure it is accurate and complete. Delete the Data: Once reviewed, you can proceed with the deletion of the data directly from the Priva interface.
  2. belyo 👍 2 Answered C
    Subject Rights Requests is an add-on not included in E3/E5 so you need to purchase it definitely has nothing to do with a retention policy
  3. Phil_79 👍 1 Answered B
    My copilot went for B (with double check to exclude C)... he states that C is more suitable to handled request from the departing/departed user himself than from an administrator performing the task... for sure, it's no A

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

How to Add an Information Barrier Segment to SharePoint Site1

S-grade

Enforcing Sensitivity Labels for Microsoft 365 Groups

S-grade

Which Locations Can Be Configured for a Subject Rights Request?

S-grade

Activate ISO/IEC 27001:2013 Template in Compliance Manager

S-grade

← Back to SC-400 Study Guide