Which of the following is MOST important to include in a data use policy?

[References:, ISACA Privacy Notice & Usage Disclosures, section 2.1: “We collect Personal Information from you when you provide it to us directly or through a third party who has assured us that they have obtained your consent.”, Chapter Privacy Policy - Singapore Chapter - ISACA, section 2: “We will collect your personal data in accordance with the PDPA either directly from you or your authorized representatives, and/or through our third party service providers.”, Data Minimization—A Practical Approach - ISACA, section 2: “Enterprises may only collect as much data as are necessary for the purposes defined at the time of collection, which may also be set out in a privacy notice (sometimes referred to as a privacy statement, a fair processing statement or a privacy policy).”, Establishing Enterprise Roles for Data Protection - ISACA, section 3: “Data governance is typically implemented in organizations through policies, guidelines, tools and access controls.”, ]