Final answer:
An organization is responsible for the personal information it collects and must comply with privacy principles.
Step-by-step explanation:
An organization is responsible for the personal information it collects and must comply with privacy principles. It must designate a representative within the organization to ensure its compliance.