John is the general accountant for a small cafe that recently launched an app allowing customers to preorder their food and drinks online. When the app launched, John requested inclusion of a screen where customers consent to having their information retained by the company and stored on the cloud. Which of the following is something John must consider when obtaining and retaining customer data?

Group of answer choices

Should John allow his manager to have access to the data?

Should the company collect sensitive data like social security numbers from their customers?

Does the company have adequate physical barriers to limit unauthorized access to their server room?

Does the app have a clearly defined place to allow a customer to opt into $($or opt out of$)$ data sharing?