privacy policy
notice
Data subjects should be given notice when their data is being collected.
purpose
Data should only be used for the purpose stated and not for any other purposes.
consent
Data should not be disclosed without the data subject's consent.
security
Collected data should be kept secure from any potential abuses.
disclosure
Data subjects should be informed as to who is collecting their data.
access
Data subjects should be allowed to access their data and make corrections to any inaccurate data.
accountability
Data subjects should have a method available to them to hold data collectors accountable for not following the above principles.