D is the correct answer (r Sensitive Personal Data or Information (SPDI), separately defined as (i) password; (ii) financial information such as Bank account or credit card or debit card or other payment instrument details;(iii) physical, physiological and mental health condition; (iv) sexual orientation; (v) medical records and history; (vi) Biometric information; (vii) any detail relating to the above clauses as provided to body corporate for providing service; and (viii) any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise.)