OECD Guidelines Collection Limitation: should be limited to personal data, obtained by lawful and fair means, and (where appropriate) with knowledge and consent of data subject Data Quality: should be relevant to the purposes for which it is to be used, should be accurate, complete and current Purpose Specification: purpose for which data is collected should be specified no later than at the time of data collection, and then subsequent use limited to the fulfillment of those purposes or such others that are no incompatible with those purposes and as are specified on each occasion of change of purpose.

Use Limitation: personal data should not be used for other purposes than those specified except with consent of data subject and by authority of law Security Safeguards: personal data should be protected by reasonable security safeguards Openness: general policy of openness about developments and practices and policies with respect to personal data; identity and usual residence of person controlling the data

Individual Participation: individual should have the right to find out if someone has data about him/her; to get copies of that data at reasonable charge in a reasonable time and manner; to challenge the data and to have it erased or amended Accountability: data controller should be accountable for complying with measure which give effect to these principles