 Providing feedback on privacy policies (A): While not the primary role, IT or software engineers often provide technical insights and feedback on privacy policies to ensure they are implementable within the organization's systems. Reference: IAPP CIPT Body of Knowledge.

 Implementing multi-factor authentication (B): IT or software engineers are typically responsible for the implementation of security measures such as multi-factor authentication to protect systems and data. Reference: IAPP CIPT Body of Knowledge.

 Certifying compliance with security and privacy law (C): Certifying compliance is usually the responsibility of compliance officers or legal teams, not IT or software engineers. IT staff may support compliance activities, but certification is not their direct responsibility. Reference: IAPP CIPT Body of Knowledge.

 Building privacy controls into the organization’s IT systems or software (D): IT or software engineers are directly involved in embedding privacy controls into systems and applications as part of privacy by design and default. Reference: IAPP CIPT Body of Knowledge.