Which statement best describes how data should be processed to protect personal information?

• A. Processing security is optional if the data is encrypted.
• B. Data processing is always secure regardless of controls.
• C. Processing should implement security measures to protect personal data from unauthorized access.
• D. Processing security applies only to marketing data.

Answer: (C)