Principles for Providing and Using Personal Information