Data Requests

Does anyone have any policies that you are willing to share that outlines how external data requests are handled?