1. Valid legal process
Atlantic requires legally valid, properly served and sufficiently specific process from a competent authority, except where a genuine emergency lawfully permits another route.
2. Scope and minimization
Requests are reviewed for authority, jurisdiction, authenticity, scope, date range and affected account. Atlantic seeks clarification or narrowing when a request is overbroad, ambiguous or technically impossible.
3. User notice
Atlantic ordinarily notifies the affected user before disclosure unless prohibited by law, court order, emergency risk or a documented need to preserve an investigation. Delayed notice may be provided when the restriction expires.
4. Emergency requests
Emergency disclosure is considered only where the requester identifies an imminent risk of death or serious physical harm, the data sought and the legal authority. Atlantic may verify the request independently and disclose only what is necessary.
5. Preservation
A valid preservation request may cause existing records to be preserved for the legally permitted period without giving the requester access. Extensions require renewed lawful process.
6. Transparency and challenges
Atlantic may publish aggregate statistics where lawful and may challenge, reject or seek judicial review of unlawful, disproportionate or conflicting demands. Nothing in this policy promises disclosure or non-disclosure in a particular case.
