Checking the compliance with section 2.8  and AP-Classic-4.1's section 8:

We have just identified the types of information to be kept
confidential and not confidential.
However, we haven't specified how to release the end entities privacy
to a valid legal request according to national laws applicable to our
CA. Shall we add more description?