Only collect the data you need. Only use data for the reason you informed the consumer. Ensure reasonable data security protections are in place. Dispose the data when it’s no longer needed.