What is the most important requirement to fulfill when transferring data out of an organization?

A. Ensuring the organization sending the data controls how the data is tagged by the receiver.
B. Ensuring the organization receiving the data performs a privacy impact assessment.

C. Ensuring the commitments made to the data owner are followed.

D. Extending the data retention schedule as needed.