A retail organization uses an AI model to analyze customers' purchase history in order to offer personalized discounts. Which of the following practices represents the MOST ethical use of customer dat

Obtaining explicit consent before using customer purchase data respects individual autonomy and aligns with data protection regulations such as GDPR and CCPA, which require informed consent for data processing beyond the original transaction purpose. Providing opt-out rights ensures customers retain ongoing control over their personal information, reinforcing trust. This approach balances the organization's analytical needs with the customer's right to privacy and self-determination.

Retaining and analyzing all available customer data without explicit consent violates privacy principles and data minimization requirements, regardless of the intent to reduce bias.

Making customer data publicly accessible for auditing would itself constitute a serious privacy violation, exposing personal purchase histories without consent.

Sharing customer data with third-party vendors without explicit consent violates data subject rights and is prohibited under major privacy regulations such as GDPR.