No, use of a QHIO does not guarantee compliance with DSA or its P&P requirements. QHIOs offer access to critical services compliant with DxF technical standards requirements and have established critical connectivity that may help Participants comply with their obligations to provide access to or exchange of HSSI. It remains the responsibility of each Participant to ensure that they comply with requirements of the DSA and its P&Ps beyond the technical standards by reviewing and complying with P&Ps including but not limited to:

• The Permitted, Required, and Prohibited Purposes P&P for the purposes for which the Participant may and must share HSSI,
• The Privacy Standards and Security Safeguards P&P for information on privacy and security standards the Participant’s systems must meet,
• The Data Elements to Be Exchanged P&P for information on data elements the Participant must make available,
• The Technical Requirements for Exchange P&P for the types of exchange a Participant must enable, and
• The Real-Time Exchange P&P for information on the requirements for timely information sharing