According to CREA's Privacy Code, how should members protect personal information?

Members are required to employ safeguards appropriate to the sensitivity of the personal information they handle, as outlined in CREA's Privacy Code. This means that varying levels of security measures should be applied based on how sensitive the information is; for example, highly sensitive information such as financial records may require more rigorous protections compared to less sensitive data.

This ensures that personal information is not only collected ethically but also is adequately guarded against unauthorized access or breaches. By tailoring the safeguards to the sensitivity of the information, members can effectively manage risks and comply with privacy standards.

The other options suggest insufficient or generic measures that do not align with the recommended practices for safeguarding personal information. Relying solely on basic security measures, verbal agreements, or dismissing the need for specific protections would not fulfill the obligation to adequately protect sensitive personal data.