Which of the following is a PRIMARY purpose of a privacy notice?

A. To obtain permission from users for the organization to use personal information as it sees fit
B. To indemnify the organization against litigation by users for the appropriation of personal information
C. To establish the organization's accountability for the use and protection of personal information
D. To ensure that the organization's privacy controls comply with the privacy laws of the user's region