Which of the following is the PRIMARY role of an IS auditor with regard to data privacy?

A. Ensuring compliance with data privacy laws
B. Communicating data privacy requirements to the organization
C. Drafting the organization’s data privacy policy
D. Verifying that privacy practices match privacy statements