Which of the following policies could be implemented to help prevent users from displaying their login credentials in open view for everyone to see?

A privacy policy governs how personal data is collected and used by an organization, not how employees manage visible credentials at their desks.

A clean desk policy requires employees to secure or remove sensitive materials - including written passwords and notes - from their desks when not in use or when away from their workstation. This directly mitigates the risk of shoulder surfing or casual observation of credentials by unauthorized individuals. It is a standard administrative control in security frameworks.

Job rotation is a fraud-prevention control that limits the ability of any one employee to commit undetected misconduct over time, not a physical credential exposure control.

Password complexity policies govern the strength and format of passwords but do not prevent users from writing them down and displaying them openly.