Data and neutrality

Principles

• Access is granted by organization and purpose
• Confidential information stays with the organization that owns it
• Only the information needed for an opportunity is disclosed
• Commercial information is not shared between competing participants

Example: sharing a service opportunity

Illustrative example: a provider needs the general location, service scope, and scheduling constraints to assess an opportunity. That purpose does not automatically require unrelated customer records, competing bids, credentials, or unrestricted facility access. Review the minimum information required and the recipient's authority before using the approved sharing channel.

If information appears to be shared with the wrong recipient, avoid forwarding it further. Use the established account or security reporting route with the relevant record reference and a description of the concern; do not paste sensitive contents into a public contact form. Preserve evidence only as directed by the applicable process.

Export and retention

Data export and retention follow the data schedule in your agreement. Confirm authorized recipients, included records, available format, delivery method, retention obligations, and any exclusions before planning a transition. This guide does not promise an unrestricted export or a universal deletion deadline.