When developing a company's privacy policy guidelines, all of the following issues that would be relevant for Data Confidentiality EXCEPT:

Question $2$ options:

Physical, technical, and administrative security measures should be implemented to ensure against unauthorized disclosure of data.

Data should be adequate, relevant, and not excessive in relation to the stated business objective

Data should not be disclosed for reasons incompatible with the stated business objective

Disclosures of data, other than the most routine, should be noted and maintained