In the context of PII collection, you must inform the individual that you are collecting their data, state the purpose, and allow them to opt out. Required under GDPR and most modern privacy frameworks.
Want to actually apply concepts like this instead of just reading definitions?
Practice free on Zamlom