Which of the following statements is most accurate in regard to data breach notifications under federal and state laws:

A、You must notify the Federal Trade Commission (FTC) in addition to affected individuals if over 500 individuals are receiving notice.
B、When providing an individual with required notice of a data breach, you must identify what personal information was actually or likely compromised.
C、When you are required to provide an individual with notice of a data breach under any state’s law, you must provide the individual with an offer for free credit monitoring.
D、The only obligations to provide data breach notification are under state law because currently there is no federal law or regulation requiring notice for the breach of personal information.