Which of the following types of Personally Identifiable Information (PII) should be addressed in a comprehensive PII policy?

A) Social Security Numbers (SSN) found in:
i. Personnel records
B) Customer information, including:
i. Addresses
ii. Credit Card Data
iii. Credit Reports
C) Legal requirements applicable in many states
D) Federal regulations mandating PII protection:
i. HIPAA
ii. GLBA
iii. PCI
iv. Sarbanes-Oxley

Select the correct options:
A) i only
B) i, ii, iii
C) i, ii, iii, iv
D) ii, iii, iv
E) All of the above