and the purposes for which the categories of personal information shall be used