When a Data User orders a data collection, as a stakeholder of the data collection you are responsible for the approval and fulfillment of the order. After data is delivered to a Data User, you can revoke their access to the data collection when the need arises.