A retail company launches a customer-facing chatbot. During a review, the responsible AI committee raises two separate concerns: (1) the chatbot never tells users they are talking to an AI rather than a human agent, and (2) the chatbot's conversation logs, which contain customer names and order details, are stored without access controls. Which pairing correctly maps each concern to the responsible AI principle it primarily violates?