When Hiring a Data Processor, Which Action Would a Data

When hiring a data processor, which action would a data controller NOT be able to depend upon to avoid liability in the event of a security breach?

A) Documenting due diligence steps taken in the pre-contractual stage.
B) Conducting a risk assessment to analyze possible outsourcing threats.
C) Requiring that the processor directly notify the appropriate supervisory authority.
D) Maintaining evidence that the processor was the best possible market choice available.