408.Which of the following statements is true with regard to information protection?
A. All personal information, by definition is considered to be sensitive, requiring specialized controls.
B. Information is not considered personal if it can only be linked to or used to identify an individual
indirectly.
C. Individuals who provide personal information to organizations share in the risk of inappropriate
disclosure.
D. Good protection controls remove any restrictions on the quantity of personal information that can be
collected