Which statement about data protection best describes company responsibilities?

Which statement about data protection best describes company responsibilities?

• A. Everyone has the right to know how their data is stored used and protected
• B. Growth in access ability and availability of social media
• C. Rights of data subjects
• D. Must delete data that is no longer needed and they must protect data users using encryption

Answer: (D)

Protecting data hinges on two practical duties: limit what you keep and secure what you keep. Deleting data that’s no longer needed reduces the amount of information at risk, while encrypting data protects it from unauthorized access both when stored and during transmission. This combination directly embodies responsible data protection practices in a real-world, actionable way. The other ideas touch on related privacy concepts—transparency to individuals about how data is stored and used, and the rights of data subjects—but they describe rights or disclosure rather than the concrete actions a company must take to safeguard information. The option about social media growth is not aligned with data protection responsibilities.

Protecting data hinges on two practical duties: limit what you keep and secure what you keep. Deleting data that’s no longer needed reduces the amount of information at risk, while encrypting data protects it from unauthorized access both when stored and during transmission. This combination directly embodies responsible data protection practices in a real-world, actionable way.

The other ideas touch on related privacy concepts—transparency to individuals about how data is stored and used, and the rights of data subjects—but they describe rights or disclosure rather than the concrete actions a company must take to safeguard information. The option about social media growth is not aligned with data protection responsibilities.