Businesses that keep sensitive information, such as bank accounts or medical data, as part of their records have a legal obligation to do what with this information?

A. keep it secure
B. share it publicly
C. encrypt it definitely
D. erase it immediately after use