Under the GDPR, when an organization uses AI for solely automated profiling that significantly affects individuals, which principle MOST directly requires the organization to be able to demonstrate lawfulness and proper safeguards to the supervisory authority?

Here's the deal — b is correct because the accountability principle (Article 5(2)) requires that the controller not only comply with data protection principles but be able to demonstrate compliance to the supervisory authority — this includes demonstrating that automated profiling under Article 22 meets legal requirements and includes proper safeguards. A, C, and D are substantive data protection principles but not the principle specifically concerned with demonstrability of compliance.