- Accountability -- designate a responsible person
- Identifying purposes -- state purpose at or before collection
- Consent -- meaningful, purpose-specific
- Limiting collection -- only what is necessary
- Limiting use, disclosure, retention -- use only for stated purpose; retain only as long as needed
- Accuracy -- keep data current
- Safeguards -- protection proportionate to sensitivity
- Openness -- publish privacy practices
- Individual access -- clients may access and correct their data
- Challenging compliance -- provide a compliance challenge mechanism
Most tested on the LLQP exam: 3 (consent), 4 (limiting collection), 7 (safeguards), 9 (individual access).