Your organization stores highly personal data in BigQuery and needs to comply with strict data privacy regulations. You need to ensure that sensitive data values are rendered unreadable whenever an employee leaves the organization. What should you do?

A. Use AEAD functions and delete keys when employees leave the organization. B. Use dynamic data masking and revoke viewer permissions when employees leave the organization. C. Use customer-managed encryption keys (CMEK) and delete keys when employees leave the organization. D. Use column-level access controls with policy tags and revoke viewer permissions when employees leave the organization.