Which of the Following Is a Provision of the State

Which of the following is a provision of the State Security Breach Notification Laws?

A) They require organizations to inform state residents if sensitive data are released.
B) They require companies to provide "opt out" choices before transferring personal data to third parties.
C) They prohibit businesses from sending misleading or deceptive commercial emails to representatives of the state.
D) They include provisions to protect the privacy and security of individually identifiable health information.