The _____ requires each financial institution to document a data security plan describing the company's preparation and plans for the ongoing protection of clients' personal data.
A. Red Flags Rule
B. Fair and Accurate Credit Transactions Act (FACTA)
C. Gramm-Leach-Bliley Act (GLBA)
D. Bank Secrecy Act (BSA)