| 💼 P3.1 Personal information is collected consistent with the entity's objectives related to privacy. | 4 | | | |
| 💼 P3.1-1 Limits the Collection of Personal Information | | | | |
| 💼 P3.1-2 Collects Information by Fair and Lawful Means | | | | |
| 💼 P3.1-3 Collects Information From Reliable Sources | | | | |
| 💼 P3.1-4 Informs Data Subjects When Additional Information Is Acquired | | | | |
| 💼 P3.2 For information requiring explicit consent, the entity communicates the need for such consent as well as the consequences of a failure to provide consent for the request for personal information and obtains the consent prior to the collection of the information to meet the entity's objectives related to privacy. | 2 | | | |
| 💼 P3.2-1 Informs Data Subjects of Consequences of Failure to Provide Consent | | | | |
| 💼 P3.2-2 Documents Explicit Consent to Retain Information | | | | |