An organization must tell individuals why information about them is collected, how to contact the organization with inquiries or complaints, what types of third parties the information will be disclosed to, and the options and means the organization provides individuals to limit the use and disclosure of the information. Notice must be provided to individuals in clear language at the point when individuals are first asked to provide personal information or as soon thereafter as is practicable. In all circumstances, the organization must inform individuals before it uses information for any purpose other than that for which it was originally collected, or before it discloses.
