An organization must give individuals access to personal information about them that it holds and enable them to change or delete the information when inaccurate, except where the burden or expense of providing access would be disproportionate to the privacy risks or where the rights of someone else would be violated. Organizations must take reasonable precautions to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, and destruction. The organization must have procedures to verify that it is complying with safe harbor rules. This publication may not be reproduced in any form or by any electronic or mechanical means, including information storage and retrieval systems, without prior written permission. All rights reserved .
Reprints are available.
Copyright 2001 INT Media Group, Incorporated All Rights Reserved.