| 💼 P4.1 The entity limits the use of personal information to the purposes identified in the entity's objectives related to privacy. | 1 | | | |
| 💼 P4.1-1 Uses Personal Information for Intended Purposes | | | | |
| 💼 P4.2 The entity retains personal information consistent with the entity's objectives related to privacy. | 2 | | | |
| 💼 P4.2-1 Retains Personal Information | | | | |
| 💼 P4.2-2 Protects Personal Information | | | | |
| 💼 P4.3 The entity securely disposes of personal information to meet the entity's objectives related to privacy. | 3 | | | |
| 💼 P4.3-1 Captures, Identifies, and Flags Requests for Deletion | | | | |
| 💼 P4.3-2 Disposes of, Destroys, and Redacts Personal Information | | | | |
| 💼 P4.3-3 Destroys Personal Information | | | | |