If a business follows an "opt-in" policy for handling personal data, information about a customer ____. O may not be released unless the customer gives permission. O may be released for any legitimate business purpose. O may be released unless the customer requests that the information be kept private. O may not be released under any conditions.