Under the Data Security Law of the PRC and PIPL, what is the driver's legal responsibility regarding passenger personal details, destinations, or travel patterns?

1. Drivers may freely record and sell passenger home addresses to real estate developers
2. Drivers must maintain strict confidentiality and are prohibited from disclosing, recording, or selling any passenger identity, trip route, or conversation data
3. Drivers should post passenger daily travel schedules online to help them find roommates
4. Drivers are required to keep a handwritten personal diary of passenger names