Page 348 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 348
Additionally, data should be obtained by lawful and fair methods.
When appropriate, data should be collected only with the knowledge
and/or consent of the individual.
