The company and employees will adhere to all laws and regulations and contractual obligations. The company will collect and maintain personal data only for legitimate business purposes.
The company will use anonymous names or aggregate data as to not individually identify personal information when required and will strictly limit access to privacy data.
The company and employees will prevent unauthorized access to privacy data and assess security controls, and when required will immediately report any violation of policy or inadvertent release of privacy data.
Employees must be cautious of sharing personal data with third parties who lack proper security safeguards and must always be cautious when transferring personal data outside a country.