- An activity must involve “an automated form of processing;”
- An activity must be “carried out on personal data;”
- The objective of the activity must be “to evaluate personal aspects about a
Data transfers that are exempt from the definition of ‘sale’
The term “sale” is defined slightly differently between and among modern U.S. data privacy statutes with some statutes defining the term as including exchanges of personal information in return for valuable consideration, and others defining the terms as including only exchanges of personal information in return for monetary consideration. As the following chart indicates, state
How do state statutes differ in terms of how they define the term ‘selling’?
Modern data privacy statutes create special rules for activities that involve “selling.” Among other things, most modern U.S. data privacy statutes require companies to allow data subjects to opt out of having their personal information sold. As the following chart indicates, the term “sale” is defined slightly different between and among state statutes, with some