Which of the following European Union (EU) principles pertaining to the protection of information
on private individuals is incorrect?

A.
Data collected by an organization can be used for any purpose and for as long as necessary,
as long as it is never communicated outside of the organization by which it was collected

B.
Individuals have the right to correct errors contained in their personal data

C.
Transmission of personal information to locations where “equivalent” personal data protection
cannot be assured is prohibited.

D.
Records kept on an individual should be accurate and up to date

Explanation:
Directive 95/46/EC
ACCESS
Individuals must have access to personal information
about them that an organization holds and be able to
correct, amend, or delete that information where it is
inaccurate, except where the burden or expense of
providing access would be disproportionate to the
risks to the individual’s privacy in the case in
question, or where the rights of persons other than
the individual would be violated.

Not B : Legitimate Purpose
Personal data can only be processed for specified,
explicit and legitimate purposes and may not be
processed further in a way incompatible with those
purposes.