In addition to copyright laws, it is important to observe the personal data protection laws, GDPR, LGPD and CCPA. In this way, it is mandatory to perform the anonymization of data sets that have personal data processing. I suggest that the InterSystems DPO participate in the application approval process, because InterSystems can be classified as a data processor because it hosts the applications that handle this data.