QuestionQ115

Foundational Principles

Which statement below describes an acceptable disclosure practice?

  • A An organization's privacy policy discloses how data will be used among groups within the organization itself.
  • B With regard to limitation of use, internal disclosure policies override contractual agreements with third parties.
  • C Intermediaries processing sensitive data on behalf of an organization require stricter disclosure oversight than vendors.
  • D When an organization discloses data to a vendor, the terms of the vendor' privacy notice prevail over the organization' privacy notice.
Explanation

A privacy policy should transparently disclose how data is used and shared within the organization, including among its internal groups.

Community Discussion

No comments yet. Be the first to start the discussion!