rivate companies can collect/use/disclose personal informationoby fair and lawful meansowith your consentoonly for purposes that are stated and reasonablecompanies are obliged to protect your personal informationcompanies are obliged to destroy info when it's served its original purposecompanies must identify reasons for collecting your personal infocompanies should use info only for purpose in which it was collected