Personal information should be administered and used in accordance with the legislation in force on the protection of personal data.