Extract to table

A business that sells or shares personal information must provide a "Do Not Sell or Share My Personal Information" link on its website and must honor opt-out requests within fifteen (15) business days

If Quorum's Derived Data constitutes personal information and its third-party licensing constitutes a sale, Quorum must honor opt-out requests from consumers whose data is incorporated in the Derived Data

A contractor must agree not to retain, use, or disclose the personal information for any commercial purpose other than providing the services specified in the contract

All direct identifiers — including names, Social Security numbers, account numbers, addresses, dates of birth, telephone numbers, email addresses, and any other unique personal identifiers — must be permanently removed from Derived Data outputs before external commercialization

Quasi-identifiers — data elements that, in combination, can uniquely or nearly uniquely identify an individual — must be suppressed, generalized, or otherwise rendered non-identifying