Partner rules

Data-use & quality standards

Permitted use

Use supplied inquiry information only to evaluate and respond to the specific request for which it was supplied.

Not permitted

Do not resell, publish, use for unrelated profiling or add supplied inquiries to unrelated marketing lists.

Lead-use restriction

Providers may use routed data only to evaluate/respond to the specific request. Resale, unrelated marketing, unauthorized enrichment and public disclosure are prohibited.

Security incident notification

If a provider becomes aware of unauthorized access, disclosure, loss or misuse involving a routed lead, it must promptly stop further exposure, preserve relevant facts, and notify the network privacy/security contact without unreasonable delay so containment and any required notices can be assessed.

Lead deletion

If a provider does not pursue a routed request, it should delete or de-identify local copies promptly and, as a network operating rule, within 30 days unless a longer period is reasonably required for an active transaction, dispute, fraud/security review or legal obligation.

Security

Restrict access, use reasonable safeguards and delete/de-identify unused copies when no longer reasonably needed.