ATSI does not disclose personal information to third parties, unless required to do so in response to a lawful request by public authorities, including to meet national security or law enforcement requirements. In cases of onward transfer to third parties of data of EU individuals received pursuant to the EU-US Privacy Shield, ATSI is potentially liable. Individuals have the right to access their personal data as long as a.) the individual is in good standing with their organization b.)