Regulatory compliance Other measures for protection of privacy Information security protection Customer problem handling Implementation controls and education The collection and use of personal information must comply with the Personal Information Protection Act, and the subjects of said information have the right to know, access, correct, and delete their personal information.