California Consumer Privacy Act, definition of service provider (Cal. Civ. Code 1798.140(ag)(1))
A vendor that processes customers' personal information as a service provider must be barred by contract from selling it or using it for other purposes, so it cannot license that information to an AI buyer.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“pursuant to a written contract, provided that the contract prohibits the person from: (A) Selling or sharing the personal information. (B) Retaining, using, or disclosing the personal information for any purpose other than for the business purposes specified in the contract for the business”
Where it was read
Also read from the same source
- California Consumer Privacy Act, definition of sell (Cal. Civ. Code 1798.140(ad)(1))
- California Consumer Privacy Act, transfer in a merger, acquisition or bankruptcy is not a sale (Cal. Civ. Code 1798.140(ad)(2)(C))
- California Consumer Privacy Act, definition of deidentified (Cal. Civ. Code 1798.140(m))
- California Consumer Privacy Act, right to opt out of sale or sharing (Cal. Civ. Code 1798.120(a))
- California Consumer Privacy Act, right to limit use and disclosure of sensitive personal information (Cal. Civ. Code 1798.121(a))
- California Consumer Privacy Act, definition of sensitive personal information (contents of messages) (Cal. Civ. Code 1798.140(ae)(1)(E))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide