You are about to receive personal information from the client as part of project execution. Which of the following is most appropriate for international data transfers?
a. If you will have it transferred to the offshore team using the Citrix client so that only data is viewed but cannot be copied to the local machine, then you don't have to inform the client.
b. We have a duty to inform clients about the location of processing and let them determine and prescribe appropriate safeguards to be deployed by us.
c. If you deploy appropriate safeguards such as encryption and data masking, data may be stored anywhere in the world.
d. In the internet era, any data may be accessed from anywhere in the world, and since the client knows we are a global organization, we don't have to inform the client location of the processing.