The REC Code Manager has updated the REC Service User Categorisation and Assessment Document to provide further guidance on the framework used to determine the scope of the Information Security and Date Protection assessment. This includes clarifying of the level of assessment which is required for each user type, which varies based on way a user accesses a service; this is because API access gives the ability to access lots of data, as well as the potential to disrupt other users of the REC Service.