Organizations must ensure that proper consent is obtained from data subjects or establish some other lawful basis for processing before processing their personal data. What's another requirement that must be met before processing data? 1.- Notify subjects after processing their sensitive personal data
2.- Request that users verify their nationalities and occupations before processing the information.
3.- Provide a simple method for data subjects to withdraw consent
4.- Review each data subject's user history to ensure they have not been asked to give consent to data collection within the past six months.

1. you have a small business that is divided into 3 departments: accounting, sales, and administration. these departments have the following number of devices (computers, printers, etc.): accounting-31, sales-28, and administration-13. using a class c private network, subnet the network so that each department will have their own subnet. you must show/explain how you arrived at your conclusion and also show the following: all available device addresses for each department, the broadcast address for each department, and the network address for each department. also, determine how many "wasted" (not usable) addresses resulted from your subnetting (enumerate them).