What Does It Mean to "Rationalize" Data Protection Requirements

What does it mean to "rationalize" data protection requirements?

A) Evaluate the costs and risks of applicable laws and regulations and address those that have the greatest penalties
B) Look for overlaps in laws and regulations from which a common solution can be developed
C) Determine where laws and regulations are redundant in order to eliminate some from requiring compliance
D) Address the less stringent laws and regulations, and inform stakeholders why they are applicable