A.A photograph taken in public and published in a newspaper.

B.A public official's salary published on a government web site.

C.Information about a defendant contained in court records.

D.A person's telephone number published in a public directory.

A.Consistency with the ten privacy principles, an independent oversight body and a redress mechanism.

B.Consistency with the ten privacy principles, an appeal process and a redress mechanism.

C.Consistency with the ten privacy principles, an independent oversight body and a process for accessing information.

D.Consistency with at least eight of the ten privacy principles, an independent oversight body and a complaint handling mechanism.

A.If the data controller has received preapproval from a Data Protection Authority (DPA), after submitting the appropriate documents.

B.Only if the Data Protection Impact Assessment (DPIA) shows low risk.

C.Only as a last resort and when interpreted restrictively.

D.When it has been determined that adequate protection can be performed.

A.A baseline of marketers' minimum responsibilities for providing opt-out mechanisms.

B.A bill of rights for individuals seeking access to their personal information.

C.An international court ruling on personal information held in the commercial sector.

D.A code of responsibilities for medical establishments to uphold privacy laws.

A.Affirmative consent from a minor's parent or guardian before collecting the minor's personal information online.

B.Implied consent from a minor's parent or guardian, or affirmative consent from the minor.

C.Implied consent from a minor's parent or guardian before collecting a minor's personal information online, such as when they permit the minor to use the internet.

D.Affirmative consent of a parent or guardian before collecting personal information of a minor offline (e.g., in person), which also satisfies any requirements for online consent.