Lusha Government Data Access Reports

Please click here to access the 2021 report.

Lusha Government Data Access Report 2022

Governments or other regulatory authorities, including law enforcement or intelligence agencies can submit to Lusha from time to time requests for the personal information of our customers (“Customers”) or data subjects whose personal information is retained in our database (“Data Subjects”) for a variety of reasons, including to gather information as part of criminal investigations.

Lusha can receive the requests from regulatory authorities in countries where Lusha is located or other countries via Mutual Legal Assistance Treaty processes. We can receive various forms of requests seeking access or disclosure of personal information of Customers and Data subjects or performance of actions, including subpoenas, warrants or other judicial, regulatory, governmental or administrative orders, demands or requests (“Government Authority Requests”).

Lusha did not receive any Government Authority Requests during the period of 1 January 2022 through to 31 December 2022.

If Lusha receives Government Authority Requests in future, Lusha will review every request whether it remains within the powers granted to the government authority and the prospects of challenging the request, if there are reasonable grounds to quash or narrow the request. We will reject Government Authority Requests when they are improperly served to us, or exceeding the power or jurisdiction of requesting authority.

Lusha will promptly notify the Customer of every Government Authority Request so that the Customer may contest or seek to narrow the request. If Lusha is prohibited by applicable laws from notifying the Customer of the Government Authority Request Lusha will make reasonable efforts to allow the Customer to intervene in the proceedings and to contest the request.

Lusha will make all reasonable efforts to redirect the requesting authority to obtain the personal data directly from the Customer. Lusha may reject the Government Authority Request when no legal reasons exist, or when the government authority cannot request the data from the customers themselves.

Lusha will notify the Data Subject of the Government Authority Request, if the Data Subject’s identity is known to us.

Where personal data is required to be disclosed, Lusha will take reasonable steps to ensure that the personal data disclosed is proportionate and limited to the minimum amount strictly necessary for the purpose of complying with the Government Authority Request.

Lusha will maintain a written record of Government Authority Requests. Where permitted by applicable law, Lusha will make aggregated information from such records available to the Customer upon request.