Question: While performing data gathering for a pen-testing engagement, you discover that the client has a lot of European customers. Which of the following would you consult to check what rules govern the personal information of citizens from the European Union when that information is stored in the United States? a. SOX b. PCI DSS c. GLBA d. GDPR