Which of the following is not required by an organization in US, resorting to EU-US Safe Harbor provisions, to transfer personal information from EU member nation to US?
A. Adherence to the seven safe harbor principles
B. Disclose their privacy policy publicly
C. Sign standard contractual clauses with data exporters in EU
D. Notify FTC of the self-certification