From 617ecae5f0f052bc102fa1d42358596e17b4be18 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ricardo=20Mir=C3=B3n?= <ricardo.lebu@gmail.com>
Date: Tue, 23 Jul 2024 19:16:17 -0600
Subject: [PATCH] Update standard questions for more clarity on indicator 9A

These changes modify the language so it is more clear the intention of the questions and expected answers of indicator 9A. Data Privacy and Security.
---
 standard-questions.md | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/standard-questions.md b/standard-questions.md
index ef4fbe6..1e379ee 100644
--- a/standard-questions.md
+++ b/standard-questions.md
@@ -145,14 +145,18 @@ __Where is your solution's source hosted?__
         </tr>
         <tr>
             <td valign="top">9 A. Data Privacy & Security</td>
-            <td valign="top">If your digital solution collects, stores and distributes PII data (personally identifiable information) data, then you must demonstrate how is the privacy, security and integrity of this data is ensured
+            <td valign="top">If your digital solution allows implementors to collect, store and/or distribute PII data (personally identifiable information), then you must demonstrate how the privacy, security and integrity of this data can be ensured
             </td>
             <td valign="top">
                 <ul>
-                    <li>Does your solution collect / store / distribute PII data?*<br>Please select the option that is applicable for your solution. <br>PII data is NOT collected NOT stored and NOT distributed. <br>PII data is collected but NOT stored and NOT distributed. <br>PII data is collected and stored but NOT distributed. <br>PII data is collected and stored and distributed.
-                    </li>
-                    <li>What are types of data that is collected / stored / distributed?<br>Please list the types of PII data. Example: Name, Email, etc.</li>
-                    <li>How does your solution ensures data privacy & security?<br>Please demonstrate how the project ensures the privacy, security and integrity of this data and the steps taken to prevent adverse impacts resulting from its collection, storage and distribution.
+                    <li>Does your solution allow the collection / storage / distribution of PII data?*<br>Please select the option that is applicable to your solution. 
+                        <br>PII data can NOT be collected NOT stored and NOT distributed. 
+                        <br>PII data can be collected but NOT stored and NOT distributed. 
+                        <br>PII data can be collected and stored but NOT distributed. 
+                        <br>PII data can be collected and stored and distributed.
+                    </li>
+                    <li>What are the types of data that are collected / stored / distributed?<br>Please list the types of PII data. Example: Name, Email, etc.</li>
+                    <li>How does your solution ensure data privacy & security?<br>Please demonstrate how the solution can ensure the privacy, security and integrity of PII data and the steps taken to prevent adverse impacts resulting from its collection, storage and distribution.
                     </li>
                 </ul>
             </td>