Exam CIPT topic 1 question 26 discussion

The correct answer is A. An organization's privacy policy discloses how data will be used among groups within the organization itself. This statement describes an acceptable disclosure practice because it aligns with the principle of transparency in data handling within an organization. It is important for organizations to clearly communicate how data will be used, including how it is shared internally among different groups or departments, to ensure that data subjects are aware of how their information is being handled. The other options either contradict best practices (like overriding contractual agreements or giving precedence to a vendor's privacy notice over the organization's) or are less relevant to standard disclosure practices.

Why not D? Isn't A a bit too detailed for the data subjects?