The FTC has established fair information principles that it recommends the private sector provide to customers. The principles are notice, choice, access, security, and redress. Notice provides customers with information about the organization’s data management practices before personal information is collected from them. Choice is about obtaining the customer’s consent before using the information for a purpose other than the purpose for which it was collected (i.e., secondary uses). Secondary uses include other internal uses, such as to cross– or up–sell different products, or to share the information with third parties. Access provides customers a way to access and amend information the organization maintains about them. Security involves measures to protect against loss and the unauthorized access or disclosure of information. Redress provides a means by which customer questions and complaints can be received and processed.
