Organizations creating, maintaining, using or disseminating personal information must take reasonable precautions to protect it from loss, misuse and unauthorized access, disclosure, alteration and destruction.
Notice
Choice
Onward Transfer
Data Integrity
Access
Enforcement
Annex