Dan Is the Chief Information Officer for Humphrey Company, and He

Multiple Choice

Dan is the Chief Information Officer for Humphrey Company, and he is reviewing security-related policies for the organization. Humphrey Company collects a wide array of data from its customers and understands the importance of it. Which of the following is an example of an inappropriate policy or practice in the context of the three principles of proper data usage?

A) Allowing customers to create their own unique login where they can access their account information including their past orders and sensitive personal and credit card information
B) Selling a customer list from the company database for customers that signed a waiver when they came aboard
C) Selling an email distribution list to an outside company for a fair price without users' prior permission
D) Sharing customer spending trends from the current year with company shareholders