A group of clinics decides to create an identification federation for their users (medical providers and clinicians). In this federation, all of the participating organizations would need to be in compliance with which U.S. federal regulation? option A Gramm-Leach-Bliley Act (GLBA) option B Health Information Portability and Accountability Act (HIPAA) option C Payment Card Industry Data Security Standard (PCI DSS) option D Family and Medical Leave Act (FMLA)