Which of the following is the MOST significant obstacle to establishing a new privacy program?

A. Unresolved overlap of security and privacy roles and responsibilities
B. An insufficient privacy awareness training program
C. A Complex legal and regulatory landscape
D. Failure to perform a business impact analysis (BIA)