Starting March 13 developers who submit builds to App Store that use API requiring approved reasons will be notified to include reasons in privacy manifests.
And on May 1 submissions will require approved reasons for API use in privacy manifests.
Developers are also responsible for all third-party frameworks included in the submission (including binary dependencies).
Apple Developer: