Which of the following statements is true with regard to information protection?
A . All personal information, by definition is considered to be sensitive, requiring specialized controls.
B . Information is not considered personal if it can only be linked to or used to identify an individual indirectly.
C . Individuals who provide personal information to organizations share in the risk of inappropriate disclosure.
D . Good protection controls remove any restrictions on the quantity of personal information that can be collected
Answer: A