A cloud developer for an IoT service is storing billing information. Which of the following should be considered a common vulnerability in regard to this data that could be used to compromise privacy?
Enabled notifications as required by law
Lack of data retention policies
Authorized access to personal information
Secured data in motion and at rest