Extract to table

Each external recipient of Peakview-generated audience segments, targeting data, or other outputs containing or derived from consumer personal information must be subject to an appropriate contractual arrangement (service-provider, contractor, or sale/sharing agreement with opt-out pass-through)

140(ag) and (j), disclosures to these partners cannot qualify as service-provider or contractor processing and must be classified as sales or sharing

The Thornbridge data-sharing agreement must be restructured as a matter of the highest priority

The legal relationship between CDM and its third-party sellers must be clearly defined

125(b)(2), a business offering a financial incentive must notify consumers of the financial incentive and its material terms before the consumer opts in

This is a compliance gap that must be addressed in the omnibus privacy-policy drafting workstream (target: September 12, 2025)