Article X — Data Protection and Oversight

1. 1.

   All verification activities shall conform to the Privacy and Digital Conduct Policy (as defined in Article II(g)) and any later amendments.

2. 2.

   Detailed data-retention and purge schedules for ancillary verification data shall be prescribed by regulation, subject to independent oversight.

3. 3.

   Any change to data-collection scope, retention schedule, or provider arrangements shall be announced publicly in the Royal Kaharagian Gazette.

4. 4.

   Oversight shall be exercised by the Data Protection Commissioner of Kaharagia, empowered to inspect, audit, and report annually to the Sovereign Chancellery and the Office of Treasury and Finance.