3.120- What are the Requirements that companies protect consumer information?