They should not dictate what a provider`s service should do. This is why agencies should consider reconciling the terms “Must Have” with the terms “Nice to Have”. While these changes to the GTC resolve the main legal issues of the notification process, agencies are responsible for verifying the product in the context of their needs and objectives, as well as applicable laws and regulations relating to security, data protection, accessibility, record retention, ethical use and other specific policies and requirements of the Authority when using the tools. . . .