Individuals shall have the right to control personal data concerning them.
No entity shall collect or use personal data without lawful authority or consent.
Individuals may request correction or deletion of personal data where appropriate.
Congress and the states may establish laws governing data protection.