Under data protection principles, which statement best describes how client data should be handled?

Under data protection principles, which statement best describes how client data should be handled?

• A. Personal data can be used for marketing without consent.
• B. Confidentiality applies only to supervisors.
• C. Rights of individuals are optional.
• D. Personal data must be collected for stated purposes, kept confidential, and respect individuals' rights.

Answer: (D)