Which of the following is NOT one of the European Union (EU) privacy principles?

A.
Individuals have the right to correct errors contained in their personal data.

B.
Information collected about an individual can be disclosed to other organizations or individuals
unless specifically prohibited by the individual.

C.
Individuals are entitled to receive a report on the information that is held about them.

D.
Data transmission of personal information to locations where equivalent personal data protection
cannot be assured is prohibited.

Explanation:
This principle is stated as an opt-out principle in which the individual has to take action to prevent
information from being circulated to other organizations. The correct corresponding European Union
principle states that information collected about an individual cannot be disclosed to other
organizations or individuals unless authorized by law or by consent of the individual. Thus, the

individual would have to take an active role or opt-in to authorize the disclosure of information to
other organizations. The other principles are valid EU privacy principles.