ABSTRACT

The Privacy Act is very general and stipulates that a person must be informed of the fact that personal data concerning him or her is stored in a database. The personal data can only be used for the purpose for which it was originally gathered.