Managing Privacy

Collection Limitation

The collection of personal information should be limited, should be obtained by lawful and fair means with knowledge and consent of the individual

Data quality

Personal information should be relevant to the purpose for which it is collected, and should be accurate, complete and current as needed for that purpose

Purpose specification

The purposes for the collection of personal information should be disclosed before collection and upon any change to that purpose, and it's use should be limited to those purpose and compatible purposes

Use limitation

Personal information should not be disclosed or otherwise used for other than a specified purpose without consent of the individual or legal authority

Security safeguards

Personal information should be protected with reasonable security safeguards against risks such as loss or unauthorized access, destruction, use, modification, or disclosure

Openness

The public should be informed about privacy policies and practices, and individuals should have ready means of learning about the use of personal information

Individual participation

Individuals should have the following rights: to know about the collection of personal information, to access that information, to request correction, and to challenge the denial of those fights

Accountability

Individuals controlling the collection or use personal information should be accountable for taking steps to ensure the implementation of these principles