udpated api to reject request for confidentail user data