Dear EPDP Team,

The staff support team had an action item to try and edit and reorganize recommendation #6 (Contracted Party Authorization) in line with the input that was provided during Wednesday’s meeting as well as input provided as part of the yellow items list. This has resulted in a significant overhaul which will hopefully simplify and clarify the requirements as well as the process steps expected to be followed. For ease of reading, we have posted a clean version for your review (see https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit) – for those interested in seeing a redline version, please let us know off list (but note as a result of all the moving around, the whole recommendation basically shows up as redline).

The main changes we made are:

• Added introductory language to make clear that these requirements apply to disclosure requests that are sent to Contracted Party for review, not disclosure requests that are subject to recommendation 16/7 (automation);
• Separated out general requirements and authorization determination requirements (steps to be taken). For the latter, we also tried to organize these in a more logical way;
• Moved a number of the SHOULD items to the implementation guidance section to also allow for further updating in the future as new guidance may become available.

As noted, due to the overhaul it will look completely different at first sight, but it should still include all the elements that groups have indicated as being important and necessary. Please review this updated recommendation by Monday 22 June and indicate if there are still any remaining ‘cannot live with’ items.

Thanks,

Caitlin, Berry and Marika