When hiring a data processor, which action would a data controller NOT be able to depend upon to avoid liability in the

[answerhappygod]

When hiring a data processor, which action would a data controller NOT be able to depend upon to avoid liability in the event of a security breach?

A. Documenting due diligence steps taken in the pre-contractual stage.
B. Conducting a risk assessment to analyze possible outsourcing threats.
C. Requiring that the processor directly notifies the appropriate supervisory authority.
D. Maintaining evidence that the processor was the best possible market choice available.