Made purpose of use a list so multiple values can be accepted.
Added user full name as a required field, as some users may not have a CPN
Added organisation id as a required field, according to privacy requirements
Added facility id as a required field, according to privacy requirements
Added end consumer IP address as a field; while not technically marked as "required", this must be submitted if no exemption was granted during onboarding.
Update: The IP Address field in the suggested new version might need to be removed, as decision CP031 indicates that it is not required. However, as of today, CP031 has not been confirmed by all decision makers yet.