Safeguarding and securing information that is considered sensitive under privacy legislation generally falls into three...

Safeguarding and securing sensitive information under privacy legislation generally falls into three main categories: Administrative, Technical, and Physical. Administrative safeguards involve policies and procedures that manage the conduct of the organization's staff and the security of its data. Technical safeguards involve the technology used to protect data and control access to it. Physical safeguards refer to the measures taken to protect physical computer systems and related buildings and equipment from harm and unauthorized physical access. Therefore, the correct answer is B, "Physical," which complements administrative and technical safeguards to create a comprehensive security environment.