What practice should not be followed when storing confidential, sensitive$,$ and$/$or personal data?

Address storage during consent procedures

Store signed consent forms separately from data

Keep personal information in the data files

Encrypt data

Make data accessible only to authorized persons