What practice should not be followed when storing confidential, sensitive$,$ and$/$or personal data?

Keep personal information in the data files

Encrypt data

Make data accessible only to authorized persons

Store signed consent forms separately from data

Address storage during consent procedures