The data and documents are used for the purpose of reviewing the request, determining the appropriate course of action, and communicating about it. They are handled confidentially and in accordance with the approved controls.