“At the heart of any conception of privacy, and any code of privacy protection, lies the notion that people have a basic right to control their personal information. What this means, in concrete terms, is that when the government comes to collect information from people, they have the right to know why the information is being collected, how it will be used, how long it will be kept, and who will have access to it. The government has an obligation to tell them, and then proceed accordingly. This means that the government may use the information only for the purposes for which it was collected. And if personal information is going to be given to third parties, people need to be told that at the time it is collected. If they were not told that, release of the information to third parties should be subject to their consent…Although I recognize the potential value of this information, I also recognize that the use of this knowledge may lead to serious breaches of privacy…The information was collected for a specific purpose. That purpose has been fulfilled. In accordance with the principles of fair information practices, the information should not be retained. To retain it beyond its stated use is to invite pressure for other uses. No consent was given to other uses of the information.” |
