User Privacy and Data Use | ID for Vendors (IDFV)

If our app only use IDFV for our company internal analytic and security purpose, will we be required to ask permission through AppTrackingTransparency framework? Are there any changes if we want to keep use?

[UPDATE] Further more, any extra step is required for us to tell Apple if we don't mis-use the IDFV?

Also are there any complete list for items described of "You will soon be required to provide information about your privacy practices in App Store Connect."

Thanks