A component of the notice principle, wherein a company should make available its data handling practices, including notices on how it collects, uses, and shares PII.