Data disposal laws require

a.businesses to notify individuals who are affected by any incident that results in unauthorized access of data.

b.companies to obtain permission from customers before destroying data older than ten years old.

c.senders of promotional emails to offer an opt-in system to recipients.

d.businesses to destroy customer data and maintain reasonable security procedures to guard against theft.