(a) This office shall maintain in its records only such personal information which is relevant and necessary to accomplish a purpose of this office which is required to be accomplished by statute or executive order, or to implement a program specifically authorized by law.

(b) Personal information shall be collected, whenever practicable, directly from the person to whom the information pertains.

(c) This office seeks to ensure that all records pertaining to or used with respect to data subjects are accurate, relevant, timely and complete.

(d) These regulations provide information regarding the procedures by which data subjects may assert rights granted by the Personal Privacy Protection Law.