Which Sentence Best Describes Proper Compliance for an International Organization

Which sentence best describes proper compliance for an international organization using Binding Corporate Rules (BCRs) as a controller or processor?

A) Employees must sign an ad hoc contractual agreement each time personal data is exported.
B) All employees are subject to the rules in their entirety, regardless of where the work is taking place.
C) All employees must follow the privacy regulations of the jurisdictions where the current scope of their work is established.
D) Employees who control personal data must complete a rigorous certification procedure, as they are exempt from legal enforcement.