Access to non-public data policy