Which of the following is not a guideline to be considered when developing policy to secure PII date?
A. Align-Coordinate privacy policies with data classification policies
B. Retain-Ensure proper controls around data retention and destruction
C. Disclose-Fully disclose to the individual what data is being collected and how it will be used
D. Resiliency-Policies provide guidelines for the unexpected
