Data disposal laws require:

a. companies to obtain permission from customers before destroying data older than 10 yrs old.

b. businesses to destroy customer data and maintain reasonable security procedures to guard against theft.

c. senders of promotional emails to offer an opt-in system to recipients.

d. businesses to notify individuals who are affected by any incident that results in unauthorized access of data.