Your company, which sells its products in the United States and the European Union, is seeking to purchase cloud storage from a multinational cloud storage provider. The engineering team at your company wants to set up cloud data centers from the storage provider in both the United States and Germany.
Which of the following contractual provisions should be included in the contract to ensure the security of the personal data being stored in both data center locations?
To ensure the security of personal data being stored in data centers located in both the United States and Germany, the contractual provisions should include a purpose limitation provision. This provision requires that the data, including personal information, be used solely for the contracted purposes and no other purposes. By limiting the use of the data, this provision helps to protect the data from unauthorized use and potential data breaches, thereby enhancing its security.
the better option - C. A purpose limitation provision that requires the data, including personal information, to only be used for the contracted purposes.
The question is built in a confusing way. Given that the other options are not applicable at all, C seems to be correct, however, I don't see how this improves security in practice.