Rules for Use of Non-Public Data

  • Non-public data requests require authentication and attestation of a specified purpose and scope of use.
  • Requests for personal data are subject to an “ex post” dispute resolution process.
  • A Contracting Party may choose additional “due process” rules for certain data.

Contracting Parties retain existing privacy services or may add a new IdP escrow approach.