Authorization must be obtained from the client (via recorded phone call, voicemail, email, or some form of documented communication) before accessing their Sensitive Information. Likewise, Sensitive Information is to be accessed only by authorized ACST personnel and only in an effort to perform their jobs.