Extract to table

In the absence of a compliant written contract, each of these partners defaults to "third-party" status under the CCPA/CPRA, and data transfers to these partners likely constitute a "sale" or "sharing" of personal information ("PI") for which consumers must be afforded opt-out rights that Cascade is not currently providing

A business that "sells" personal information must provide consumers with the right to opt out of such sale under § 1798

Under the VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), TDPSA (Texas), OCPA (Oregon), and other Applicable State Statutes, the Thornbridge arrangement constitutes "targeted advertising" from which consumers must be able to opt out

121, precise geolocation data (defined as location information sufficient to identify a consumer's location within a radius of 1,850 feet) constitutes sensitive personal information for which businesses must provide consumers with the right to limit the use and disclosure of such information

Under CCPA/CPRA regulations (11 CCR § 7025), a business must treat an opt-out preference signal (including GPC) as a valid request to opt out of the sale and sharing of personal information

(b) Opt-Out signal compliance: Thornbridge must agree to honor consumer opt-out-of-sale/sharing signals, including GPC, in real time