The Data Exchange Framework is not a technology, but instead rules of the road for how organizations will provide access to and exchange health and social services information. Health and social services information will not reside on any state DxF system. The Permitted, Required and Prohibited Purposes P&P describes the purposes for which DxF Participants are required or permitted to exchange health and social services information under the DSA with other Participants. The Privacy and Security Safeguards P&P describes the minimum privacy and security safeguards required by the DxF for Participants to implement.