Businesses that keep sensitive information, such as bank accounts or medical data, as part of their records have a legal obligation to do what with this information?

A. Keep it secure
B. Share it publicly
C. Encrypt it indefinitely
D. Erase it immediately after use