Questions that should be addressed include:
- what information is collected?
- why is this information collected?
- how will information be used?
- who will have access to the information?