How traveller profiles are structured, who owns what, and which data is portable vs agency-retained.
Allow-listed, time-bound, scope-limited sharing with partner agencies and API partners under audit.