Which of the following European Union (EU) principles pertaining to the protection of information
on private individuals is incorrect?

A.
Data collected by an organization can be used for any purpose and for as long as necessary, as
long as it is never communicated outside of the organization by which it was collected

B.
Individuals have the right to correct errors contained in their personal data

C.
Transmission of personal information to locations where “equivalent” personal data protection
cannot be assured is prohibited.

D.
Records kept on an individual should be accurate and up to date

Explanation:
Directive 95/46/EC ACCESS Individuals must have access to personal information about them that an
organization holds and be able to correct, amend, or delete that information where it is inaccurate,
except where the burden or expense of providing access would be disproportionate to the risks to
the individual’s privacy in the case in question, or where the rights of persons other than the
individual would be violated. Not B : Legitimate Purpose Personal data can only be processed for
specified, explicit and legitimate purposes and may not be processed further in a way incompatible
with those purposes.