Company X has entrusted the processing of their payroll data to Provider Y. Provider Y stores this encrypted data on its

[answerhappygod]

Company X has entrusted the processing of their payroll data to Provider Y. Provider Y stores this encrypted data on its server. The IT department of Provider Y finds out that someone managed to hack into the system and take a copy of the data from its server. In this scenario, whom does Provider Y have the obligation to notify?

A. The public
B. Company X
C. Law enforcement
D. The supervisory authority