The general principle is that organizations and individuals who collect, process and use personal information of other people in the network environment must obtain the consent of those people. These organizations and individuals that collect, process and use personal information of other people have the following responsibilities:- To inform those people of the form, scope, place and purpose of collecting, processing and using their personal information;- To use the collected personal information for proper purposes and store it only for a given period of time set by law or as agreed upon by the two parties;- To take necessary managerial and technical measures to ensure that personal information shall not be lost, stolen, disclosed, modified or destroyed;- When requested to re-inspect, correct or cancel information by the owner or the State, to immediately take necessary measures; to refrain from supplying or using relevant personal information until it is corrected.