If an organization certified under Privacy Shield wants to transfer personal data to a third party acting as an agent, the organization must ensure the third party does all of the following EXCEPT?

If an organization certified under Privacy Shield wants to transfer personal data to a third party acting as an agent, the organization must ensure the third party does all of the following EXCEPT?
A . Uses the transferred data for limited purposes
B . Provides the same level of privacy protection as the organization
C . Notifies the organization if it can no longer meet its requirements for proper data handling
D . Enters a contract with the organization that states the third party will process data according to the consent agreement

View Answer

Answer: D

Explanation:

Reference: https://www.privacyshield.gov/Key-New-Requirements