A privacy officer at a healthcare company is reviewing how Microsoft handles the organization's data stored in Microsoft 365. She wants to confirm which Microsoft privacy principle assures the company that it retains ownership of its data and can access, control, and delete that data at any time. Which principle addresses this concern?