Is the applicant a representative of the data management office at the entity?
Does the application contain personal data?
Does the entity have a legal justification for requesting the data?