Data sharing policy: depositories must adopt frameworks specifying shared data types, monitoring, audits and accountability. Regulation 82A mandates that every depository and any company where a depository has invested adopt an Information and Data Sharing Policy covering means and manner of data sharing, types of data that may be shared, an escalation matrix, a digital database recording shared information and recipients with reasons, technological monitoring including periodic audits, and an accountability mechanism fixing individual responsibilities for breaches.