Which of the following is MOST likely to outline the roles and responsibilities of data controllers and data
processors?


A. SSAE SOC 2
B. PCI DSS
C. GDPR
D. ISO 31000