Which one of the following has the obligation to keep their business' customer personal data confidential?

Businesses that collect customer personal data have the obligation to keep that information confidential. This responsibility typically falls on the organization itself, including its employees and any third-party service providers. Legal frameworks, such as GDPR in Europe or CCPA in California, also impose strict requirements on businesses to protect customer data. Failure to maintain confidentiality can result in legal penalties and loss of customer trust.