Compliance with regulations

Your team is about to kick-off a new project that involves collecting and using large amounts of user data to build an AI application.

In a recent team meeting, there was a discussion on the regulations and legal compliance that must be upheld.

Which two of the following practices are necessary for your project to maintain legal compliance and uphold data privacy regulations? Select all that apply.