Which of the following statements is true regarding current data protections when securing data privacy through compliance?

Group of answer choices

Different states have different privacy laws so that they are local$/$regional data protections.

The "right to be forgotten" regulation in the U$.$S$.$ requires data to be erased when requested.

All states must comply with national privacy and should not have local$/$regional data protections.

The way in which organizations should monitor collected data and its retention is usually arbitrary.