Which of the Following Is a Provision of the State

Which of the following is a provision of the State Security Breach Notification Laws?

A) They require organizations to inform state residents if sensitive data are released.
B) They require companies to provide "opt-out" choices before transferring personal data to third parties.
C) They prohibit businesses from sending misleading or deceptive commercial e-mails.
D) They include provisions to protect the privacy and security of individually identifiable health information.