<aside> 📣 A to-do list for application review****

</aside>

Table of Content

Review Checklist

As part of the app review, Dataswyft has to set up a legal contract between your NEA and your users. This contract enables your users to give your NEA the permission and the right to occupy the data account within your users' own server database (each user has his/her own database). If your NEA is requesting for any other data from another data account of their databases, a data debit must also be specified within the contract. This contract is set up by Dataswyft before your app goes live and will be autogenerated when your users sign in to your app.

Dataswyft requires information for the review and for the contract to be set up. We also require the application to declare the rating of application based on the Rating Assurance system. Below is a checklist that can help you prepare for review:

Data Conduct

• Check your app rating and try to get the best possible rating for your NEA’s data conduct.
• Are you putting third-party data into the PDA? Make sure it belongs to the PDA owner and that you have all the necessary permissions from the third-party data provider to be written into the PDA.
• If you also hold the data outside the PDA, either ensure it's not identifiable or if it is, ensure it is secure. If the data is identifiable, note that your app rating for the first letter will go down to a B or lower. Also note that you would need to ensure you are compliant to data regulation for the data outside the PDA as Dataswyft cannot be responsible for that data.
• Be ready to accurately declare what data will be in the PDA, what data will sit on both your servers and the PDA, and what data will not.
• Be ready to declare any conditions imposed on a PDA user for the reuse and resharing of the data you place in their database.
• If you collect sensitive data, be ready to declare your data conduct in terms of collection, storage, usage, processing and sharing.
• If you are requesting for other namespace data (e.g. Google Calendar or Facebook), be ready to answer questions on duration, purpose and what specific data is required.

Contractual Compliance

• Ensure your app meets the consumer law requirements of all applicable laws in any jurisdiction that you intend to offer your services.
• If you are sharing PDA data with third parties, ensure that the contract has been set up by Dataswyft for sharing. Dataswyft will not be responsible for any legal agreement outside of what your app is doing with the server owner's PDA data.