To minimize the invasion of privacy, organizations should:

a$.$ collect only the data that is necessary for the stated purpose.

b$.$ not modify data once it is entered into an information system.

c$.$ not delete data even when it is not needed.

d$.$ provide unlimited access to personal information to those who have authorization.