spacedog

A site of mine is being reviewed for approval by Verotel's risk management.
They are asking for model ID & release form.

Part of my responsibilty as an ethical webmaster means I am obligated to protect the model's identity & privacy, but at the same time, I need to be in compliance with other rules & regulations that put me in catch22 position such as this.

What is the recommended procedure?

Should I forward a written statement to verotel affirming that my site is in full compliance with 2257 & refuse to furnish documents,

or do I forward docs with all the info blacked out except d.o.b