单项选择题

What are institutions required to do by a California law

A.Take new security measures.
B.Write detailed reports.
C.Catch hackers.
D.Inform the affected people that their personal information has been stolen.