When drafting the corporate privacy statement for a public web site, which of the following MUST be included?

A. Access control requirements
B. Limited liability clause
C. Information encryption requirements
D. Explanation of information usage