sumarise simple plain english two point ensure that the personal information collected is relevant to the purpose for which it is to be used, and that it is accurate, up-to-date, and complete. Take reasonable steps to notify individuals about the collection, including the purpose and any third parties to whom the information may be disclosed Personal information can only be used or disclosed for the primary purpose for which it was collected, unless an exception applies, such as risk of harm etc