Summary
Give athletes explicit control over discoverability, contact information, and access to sensitive documents.
Target requirements
Separate profile completeness from profile visibility.
Classify data as public, restricted, or sensitive.
Keep transcripts, test reports, identity records, and similar documents out of public search.
Grant access by role, purpose, and athlete consent.
Record sensitive access and important changes.
Support correction, export, deletion, and retention rules.
Address age checks and guardian involvement where legally required.
Protect the candidate database against bulk scraping and misuse.
Status note
These are product requirements. They are not a claim that the controls are already implemented.
Feedback question
Which information should a coach see before the athlete approves contact, and which information should always require a separate permission?
