Under the Personal Information Protection Law, processing personal information must follow principles of legality, fairness, and necessity, with informed consent. 根据《个人信息保护法》,处理个人信息应当遵循合法、正当、必要原则,并取得个人的知情同意。