Canadian and Provincial Privacy Laws Can Be Said to Reduce

Canadian and provincial privacy laws can be said to reduce the risk of identity theft. Which of the following statements is an example of how privacy laws might accomplish this task?

A) By requiring businesses to destroy personal information that is no longer needed.
B) By encouraging businesses to track customer purchases so they can identify any purchases that seem out of character and might therefore be fraudulent.
C) By requiring businesses to run criminal record checks on all employees.
D) By denying business the right to ever disclose personal information.
E) all of the above