Which of the following European Union (EU) principles pertaining to the protection of information on private
individuals is incorrect?

A.
Data collected by an organization can be used for any purpose and for as long as necessary, as long as it is
never communicated outside of the organization by which it was collected.

B.
Individuals have the right to correct errors contained in their personal data.

C.
Transmission of personal information to locations where “equivalent” personal data protection cannot be
assured is prohibited.

D.
Records kept on an individual should be accurate and up to date.

Explanation:
EU’s Data Protection Data Integrity states that Data must be relevant and reliable for the purpose it was
collected for.
Incorrect Answers:
B: EU’s Data Protection Directive includes the access directive which states that individuals must be able to
access information held about them, and correct or delete it if it is inaccurate.
C: EU’s Data Protection Directive includes the Onward Transfer directive which states that transfers of data to
third parties may only occur to other organizations that follow adequate data protection principles.
D: EU’s Data Protection Directive includes the Data Integrity directive which states that Data must be relevant
and reliable for the purpose it was collected for.
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 1064-1065