Which of the following is MOST important for an IS auditor to ensure is included in a global organization’s online data privacy notification to customers?

A. Consequences to the organization for mishandling the data
B. Consent terms including the purpose of data collection
C. Contact information for reporting violations of consent
D. Industry standards for data breach notification