Which OECD principle states that user data may not be shared with outside companies?

Domain 2: Asset Security Practice Questions
Questions from the following topics are included in this domain:
Identifying and classifying assets
Provisioning resources securely
Managing the data lifecycle
Security controls and compliance
Asset management
Data protection methods