Institutions must ensure that their personal data collection statement be known to each staff member. There are many ways of doing so. Having it signed by employees is a way that affords assurance to both parties.