Organizations need to evaluate and design their end-to-end data pipeline on a case-by-case basis and are responsible for any third parties that consume an individual’s data. This is often achieved by data and privacy agreements with those third parties.
This white paper is not intended to provide legal advice, and you should consult with your own legal or compliance advisors to ensure you are complying with applicable laws and regulations.