An e$-$commerce company operating in Europe and the United States is looking to ensure that they are compliant with data security laws. Which of the following should they consider as part of their compliance strategy?

Ensuring compliance with GDPR in Europe but ignoring HIPAA as they are not a healthcare company.

Ensuring compliance with local data protection regulations in the United States but disregarding GDPR as they are not based in Europe.

Ensuring compliance with GDPR in Europe and being attentive to local data protection regulations in the United States.