An organization wants to mitigate the risks associated with the lost or stolen laptops and the associated disclosure laws, while reporting data breaches. Which of the following solutions will be best

A hashing function is a one-way operation used to verify data integrity, not to provide confidentiality - it does not prevent an attacker from reading plaintext data on a stolen drive.

A digital signature authenticates the source and integrity of data but does not encrypt it, leaving the contents of a stolen laptop fully accessible to an attacker.

A Trusted Platform Module is a hardware chip that can securely store cryptographic keys and support measured boot, but the TPM alone does not encrypt disk contents - it must be paired with a full disk encryption solution like BitLocker to actually protect data at rest.

Whole disk encryption solutions such as BitLocker encrypt every sector of the drive, ensuring that an attacker who physically obtains the laptop cannot read any stored data without the correct key or credentials. Many regional and national data breach notification laws explicitly exempt organizations from mandatory public disclosure when the compromised data was protected by strong encryption, directly addressing both risks the organization faces.