Notification Obligation

Notify individuals of the purposes for which your organisation is intending to collect, use or disclose their personal data.

Purpose Limitation Obligation

Only collect, use or disclose personal data for the purposes that a reasonable person would consider appropriate under the given circumstances and for which the individual has given consent.

An organisation may not, as a condition of providing a product or service, require the individual to consent to the collection, use or disclosure of his or her personal data beyond what is reasonable to provide that product or service.

Consent Obligation

Only collect, use or disclose personal data for purposes to which an individual has given his/her consent.

Allow the individual to withdraw consent, with reasonable notice, and inform him/her of the likely consequences of withdrawal. Once consent is withdrawn, make sure that you cease to collect, use or disclose the individual’s personal data.