Which term describes the legal concept concerning the duty owed by a provider to a customer?

• A. Due Diligence
• B. Due Care
• C. Data Processor
• D. Least Privilege

Answer: (B)

The legal obligation in question is about the standard of protection a provider must meet for its customers. Due care describes the duty to exercise reasonable care to prevent harm and to safeguard a customer’s data and interests. It’s the practical obligation to implement appropriate security measures and respond to foreseeable risks, reflecting what is expected of a prudent provider.

Due diligence, while related, refers more to the thorough process of evaluating risks and verifying controls before or during business relationships. It’s about the steps taken, not the ongoing duty to customers. The other terms—data processor and least privilege—refer to specific roles or security principles, not the general legal obligation of care owed to customers.

So, due care best captures the concept of the duty owed by a provider to a customer.