Which of the Following Best Describes Proper Compliance for an International

Which of the following best describes proper compliance for an international organization using Binding Corporate Rules (BCRs) as a controller or processor?

A) Employees must sign an ad hoc contractual agreement each time personal data is exported.
B) All employees are subject to the rules in their entirety, regardless of where the work is taking place.
C) All employees must follow the privacy regulations of the jurisdictions where the current scope of their work is established.
D) Employees who control personal data must complete a rigorous certification procedure, as they are exempt from legal enforcement.