Statutory Consent Notice & Disclaimer

1. Statutory Legal Basis & Explicit Informed Consent

In accordance with Section 25 and Section 26 of the Nigeria Data Protection Act 2023 (NDPA) and applicable National Health Information guidelines, you (the "Data Subject", "Operator", or "Citizen") provide explicit, specific, informed, and unambiguous consent to MyVault Technologies ("MyVault", "we", "us") for the collection, encryption, cryptographic tokenization, storage, and emergency transmission of:

• Biometric & Identity Attributes: Full legal name, date of birth, residential address, telephone numbers, passport photograph, National Identity Number (NIN), and vehicle registration credentials.
• Sensitive Medical Category Data: ABO/Rhesus blood group, hemoglobin genotype (AA, AS, SS, AC), severe life-threatening drug/environmental allergies, chronic clinical conditions, current medications, organ donation choices, and advance treatment directives.
• In-Case-of-Emergency (ICE) Contacts: Full names, verifiable phone numbers, and relational designations of primary and alternate Next-of-Kin.

This consent constitutes the lawful basis for storing and activating your emergency QR credential, physical PVC card, and vehicle/helmet micro-identifiers.

2. Emergency "Break-Glass" Authorization & Triage Disclosure

By carrying a MyVault PVC credential, affixing a QR sticker, or completing an accredited registration, you explicitly grant irrevocable, conditional authorization to authorized healthcare personnel, licensed trauma specialists, registered paramedics, the Federal Road Safety Corps (FRSC), Nigeria Police Force emergency responders, and accredited hospital dispatch units to execute an emergency "Break-Glass" disclosure of your vital records under the following protocols:

• Level 1 Public Scans (First Responder Immediate Triage): Scanning your physical QR credential immediately discloses triage-critical data (blood group, genotype, reported severe allergies, and primary ICE phone number) without requiring password clearance, ensuring rapid intervention when you are unconscious or incapacitated.
• Level 2 Clinical Deep-Access (In-Hospital Triage): Full medical history, advance directives, digital copies of insurance cards, and attending physician details are unlocked exclusively by certified clinical personnel following mandatory SMS authorization or cryptographic OTP dispatched to your designated Next-of-Kin.
• Tamper-Proof Audit Logging: Every scan or break-glass access generates a permanent, cryptographically signed audit log recording the responder's IP address, device telemetry, facility identifier, timestamp, and clinical justification.

3. Advance Medical Directives & "No Blood" Transfusion Disclaimer

MyVault allows registered operators to upload advance directives, including refusal of specific medical procedures (such as Jehovah's Witness "No Blood" cards, advance resuscitation limits, or religious care stipulations).

4. Next-of-Kin (ICE) Emergency Telecommunications Consent

You warrant that you have obtained the full authorization of your designated Next-of-Kin to submit their names, telephone numbers, and relationship details to the MyVault registry. You explicitly authorize MyVault to:

• Transmit automated, high-priority emergency SMS broadcasts, automated interactive voice calls, and data alerts to your ICE contacts the moment your emergency profile is scanned or clinical break-glass is executed.
• Include approximate GPS geolocation metadata, timestamp, and attending healthcare facility details in the emergency dispatch notice.
• Retain delivery receipts and telecommunication carrier transmission confirmations for statutory audit and dispute resolution.

MyVault utilizes tier-1 Nigerian telecommunication aggregators but cannot be held liable for carrier delays, mobile network outages, SIM disconnections, or SMS delivery latency outside its direct server architecture.

5. System Limitations & "Not a 911 / 112 Dispatcher" Disclaimer

MyVault is a secure identification, health data storage, and emergency alerting platform. MyVault is NOT an ambulance provider, hospital, law enforcement agency, or emergency medical dispatch center.

• MyVault does not own or dispatch emergency ambulances, trauma vehicles, or rescue helicopters.
• Scanning a MyVault QR code alerts designated emergency contacts and presents vital medical data to attending responders; it does not constitute a guaranteed dispatch of governmental emergency services.
• Neither MyVault Technologies nor its accredited field agents guarantee survival, arrival times of emergency responders, hospital bed availability, or the medical efficacy of treatments rendered.

6. Operator Self-Attestation & Accuracy Warranty

You affirm under penalty of civil liability and account suspension that all personal, medical, and emergency data submitted is accurate, true, and up to date. You acknowledge that:

• Submitting false blood groups, inaccurate genotypes, or non-functional Next-of-Kin numbers creates immediate, life-threatening risks during clinical triage.
• MyVault does not conduct clinical venipuncture or laboratory verification of your blood group unless verified through an accredited partner laboratory.
• You bear the sole affirmative obligation to promptly update your profile if your medical condition, allergies, primary hospital, or ICE contacts change.

7. Healthcare Provider & Good Samaritan Immunity

To the maximum extent permitted under applicable law, any certified clinician, paramedic, law enforcement officer, or bona fide Good Samaritan who accesses a MyVault credential in good faith during a road accident, collapse, or medical emergency shall be immune from civil claims regarding unauthorized data inspection, provided such access was performed solely to preserve human life and safety.

8. Consent Revocation, Erasure & Statutory Audit Retention

Under NDPA 2023 Section 34, you retain the statutory right to withdraw your consent and request deactivation or erasure of your MyVault emergency profile at any time by contacting our Data Protection Officer at privacy@myvault.com.ng or via your profile management dashboard.

Upon verified revocation of consent, your public QR credential will immediately be rendered invalid and return a "Profile Deactivated" notice. However, in accordance with NDPA accountability guidelines and statutory health record obligations, historical clinical break-glass access audit logs and financial transaction records will be retained in encrypted, immutable archives for the legally mandated statutory limitation period.