Which term describes a contract-like framework that defines what personally identifiable information can be shared, with whom, how it is transmitted securely, and opt-out options?

• A. Data Handling Policy
• B. Privacy-Level Agreement
• C. Privacy Policy
• D. Data Sharing Agreement

Answer: (B)

A contract-like framework that governs how personally identifiable information can be shared, with whom, how it’s transmitted securely, and the ability to opt out is best described by a privacy-level agreement. This term signals a formal, negotiated document that sets binding privacy commitments: what data can be shared, who may receive it, the security measures for transmission, and the ways individuals can exercise control over their data. It captures the comprehensive, enforceable nature of how privacy and data sharing are handled between parties.

Data handling policy describes internal guidelines for processing data and may not specify external recipients or individual opt-out rights. A privacy policy is typically consumer-facing, outlining general data practices rather than binding terms with data recipients. A data sharing agreement is a contract between specific parties about sharing data, but it doesn’t inherently focus on end-user opt-out rights as a central feature. The privacy-level agreement combines these elements into a formal privacy framework.