Information privacy principles 3 and 4...