Many countries require organizations that collect personal information
an organization that has asked you to provide personal information. Does
their policy address all of the principles discussed in the text?
(Reference Section 18.3). Which areas are lacking? Comment on another