Wen is an auditor. He is auditing a large mortgage company based in the United States. He is determining whether the company has consistently and adequately provided privacy notices to its customers and is abiding by any customer's choice to limit the sharing of their personal information. Against which of the following is Wen evaluating compliance?

A. Federal Information Security Management Act (FISMA)
B. Safeguards Rule of the Gramm-Leach-Bliley Act (GLBA)
C. Red Flags Rule (RFR)
D. Financial Privacy Rule of the Gramm-Leach-Bliley Act (GLBA)