Compliance with obligations

(1) Subject to sections 6 to 9, every organization shall comply with the obligations set out in Schedule 1.
Meaning of should
(2) The word should, when used in Schedule 1, indicates a recommendation and does not impose an obligation.
Appropriate purposes
(3) An organization may collect, use or disclose personal information only for purposes that a reasonable person would consider are appropriate in the circumstances.