access request
Currently, if I want to access restricted files, I click on the button "Request access". The data depositor, who has to decide if his/her (sensitive) data can be accessed or not, do not know for what purpose and in which context the data will be used. Thus I suggest that you should not only click the button but also there should be a small text field where it should be described why the person needs access to the data (for a research article, out of interest, for commercial reasons etc.)
Also, we should think about the duration of the access: Currently, it does not expire, however, I would suggest that users have one month or so until the access expires - if they did not access it by then, they need to request it again - or what do you think?
Thirdly, as I curator I have access to restricted datasets of curated category; however in the tab "files", under the files themselves, I can still click on "request access" - which I already have; this must be changed in a message like: "As the curator of this category you automatically have access to this dataset"