Policies/en/Access-to-Nonpublic-Personal-Data: Difference between revisions

While Designated Community Members may disclose Nonpublic Personal Data to third parties under the circumstances described above, they are under no obligation by the Foundation to do so. Please note, however, if a Designated Community Member chooses to disclose in a situation covered by (ii), or (iv), or if they are required by law to disclose to law enforcement, administrative bodies, or other governmental agencies, they must secure written approval from the Ynternet.org Foundation by sending the Foundation's designated disclosure contact (address to be defined) an explanation of the proposed disclosure at least ten (10) business days prior to such anticipated disclosure.

In the event that a Designated Community Member receives a request for Personal Data from law enforcement regarding an immediate and credible threat of bodily harm, as described above in (iii), and the Designated Community Member chooses to disclose Personal Data, they are permitted to do so without pre-authorization, however that Designated Community Member should immediately contact the Foundation's designated disclosure contact (address to be defined) with an explanation of the disclosure. If the Designated Community Member chooses not to disclose Personal Data in response to an emergency request from law enforcement, that Designated Community Member should immediately contact the Foundation's designated emergency contact (address to be defined) with details of the request so that it can be evaluated for possible Foundation disclosure.

All other formal and informal requests for user Nonpublic Personal Data (i.e. those not covered by one of the situations described above or those not acted upon by a community member with access rights), including subpoenas, from law enforcement, government agencies, attorneys, or other third parties should be directed to the Ynternet.org Foundation's Legal department (contact address to be defined).