{"id":7559,"date":"2025-09-18T08:30:00","date_gmt":"2025-09-18T13:30:00","guid":{"rendered":"https:\/\/trustarc.com\/?post_type=resource&#038;p=7559"},"modified":"2025-09-24T09:01:31","modified_gmt":"2025-09-24T14:01:31","slug":"selling-sharing-personal-information","status":"publish","type":"resource","link":"https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/","title":{"rendered":"Selling and Sharing Personal Information"},"content":{"rendered":"\t\t<section id=\"block_6f5064fa879d5da212930688ff4ba8c8\" class=\"resource-intro intro-simple\">\n\t\t\t<div class=\"container\">\n\t\t\t\t\t\t\t\t\t<strong class=\"sub-title block uppercase\">Article<\/strong>\n\t\t\t\t\t\t\t\t\t\t<h1>Selling and Sharing Personal Information<\/h1>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\n\n\t<section id=\"block_f7b3b3347e59746f49cfd7a300b27f8c\" class=\"columns-content\">\n\t\t<div class=\"container\">\n\t\t\t<div class=\"left\">\n\t\t\t\t\t\t<div class=\"person-wrap\">\n\t\t\t<a href=\"https:\/\/trustarc.com\/people\/maciej-piszcz\/\">\t\t\t\t\t\t\t<div class=\"img-holder\">\n\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"110\" height=\"110\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/03\/people-maciej-piszcz-round-110.png\" class=\"attachment-full size-full wp-post-image\" alt=\"\" \/>\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t<strong class=\"block name\">Maciej Piszcz<\/strong>\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"block position\">Senior Assurance Program Manager, AI &amp; Global Privacy, TrustArc<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/a>\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t<div class=\"middle\">\n\t\t\t\t<div class=\"content\">\n\t\t\t\t\t<h2>Privacy PowerUp #13<\/h2>\n<p><a href=\"https:\/\/youtu.be\/koqHjTZp6MY\" target=\"_blank\" rel=\"noopener\">Selling and sharing personal information<\/a> impacts more than data management\u2014it affects accountability, transparency, and even a brand\u2019s trustworthiness.<\/p>\n<p>This article explains how privacy teams can manage the legal and operational nuances of selling and sharing personal information. We&#8217;ll dive into regulatory assessments, data inventory must-haves, transparency and <a href=\"https:\/\/trustarc.com\/resource\/understanding-individual-rights\/\" target=\"_blank\" rel=\"noopener\">individual rights<\/a>, and how to operationalize it all like a pro.<\/p>\n<h2>Selling and sharing: What\u2019s the difference?<\/h2>\n<p>Depending on the laws, selling and sharing include the following:<\/p>\n<ul>\n<li><strong>Selling<\/strong> includes transfer, disclosure, making available of personal information to a third party for \u201cmonetary or other valuable consideration\u201d<\/li>\n<li><strong>Sharing<\/strong> includes disclosing, making available, transferring of personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration<\/li>\n<\/ul>\n<p>Note that disclosing personal information to service providers for business purposes may not trigger additional requirements.<\/p>\n<h2>1. Legal and regulatory assessment: Know your regulatory obligations<\/h2>\n<p>One of the first steps should be assessing where you process personal information and, consequently, which laws apply to your organization.<\/p>\n<p>California is the only state in the U.S. that explicitly covers the definitions of \u201cselling\u201d and \u201csharing\u201d. States such as <a href=\"https:\/\/trustarc.com\/regulations\/colorado-privacy-act\/\" target=\"_blank\" rel=\"noopener\">Colorado<\/a>, <a href=\"https:\/\/trustarc.com\/regulations\/virginia-cdpa\/\" target=\"_blank\" rel=\"noopener\">Virginia<\/a>, <a href=\"https:\/\/trustarc.com\/regulations\/utah-cpa\/\" target=\"_blank\" rel=\"noopener\">Utah<\/a>, and <a href=\"https:\/\/trustarc.com\/regulations\/connecticut-cdtpa\/\" target=\"_blank\" rel=\"noopener\">Connecticut<\/a> use explicit definitions of \u201cselling\u201d, but do not include \u201csharing\u201d explicitly. While definitions and enforcement priorities vary, most of these laws outline consumer rights and business obligations tied to these concepts, especially in the context of digital advertising and third-party data transfers.<\/p>\n<p>Outside of the U.S., laws like the <a href=\"https:\/\/trustarc.com\/regulations\/gdpr\/\" target=\"_blank\" rel=\"noopener\">GDPR<\/a> implicitly include concepts of \u201cselling\u201d and \u201csharing.\u201d Under the definition of processing of personal information, which includes collection, use, disclosure, or making available of personal information.<\/p>\n<p>Understanding <strong>which laws apply<\/strong> to your organization is the foundation of any effective privacy program. If you\u2019re looking to simplify that process, <a href=\"https:\/\/trustarc.com\/products\/privacy-data-governance\/nymity-research\/\" target=\"_blank\" rel=\"noopener\">Nymity Research<\/a> offers expert-curated insights, daily updates, and multi-jurisdictional comparisons, helping you identify your obligations faster and with greater confidence. That includes <a href=\"https:\/\/trustarc.com\/nymityai\/\" target=\"_blank\" rel=\"noopener\">NymityAI<\/a>, which can save you hours and has been built on the work of over 25 years by trusted privacy experts.<\/p>\n<p>Regulatory applicability depends on multiple factors, depending on the regulations, geographical location, or data you are collecting, using, or disclosing. For example, in California, there is a <strong>revenue<\/strong> and <strong>volume<\/strong> <strong>threshold<\/strong>. The GDPR has an extraterritorial reach, so your company may fall under the scope of this regulation if it has no physical presence in the EU.<\/p>\n<h5>What else to consider in your assessment:<\/h5>\n<ul>\n<li>Whether you collect sensitive personal information<\/li>\n<li>Engaging vendors and your vendor assessment practices<\/li>\n<li>Using personal information for cross-contextual advertising<\/li>\n<\/ul>\n<h4>Know your regulatory footprint<\/h4>\n<p>Multiple privacy regimes have a broad reach, and companies\u2014including mid-sized businesses\u2014need to know their obligations. If you operate in multiple jurisdictions, you will likely be covered by their privacy regulations. Understanding the concepts, such as \u201cselling\u201d and \u201csharing,\u201d will be critical to designing scalable, compliant privacy operations.<\/p>\n<p>If you\u2019re collecting personal data, chances are you\u2019re already in the game. The question is whether you\u2019ve read the rulebook.<\/p>\n<h2>2. Data inventory: Build a map before you navigate<\/h2>\n<p><a href=\"https:\/\/trustarc.com\/resource\/building-data-inventory-mapping-ropa\/\" target=\"_blank\" rel=\"noopener\">Data inventory<\/a> is a critical element when thinking about data governance, data protection, and risk management.<\/p>\n<p>You need to know:<\/p>\n<ul>\n<li><strong>What categories of personal information<\/strong> do you collect, use, and disclose?<\/li>\n<li><strong>Why<\/strong> do you process the data? What\u2019s the purpose?<\/li>\n<li><strong>Who do you share it with<\/strong>, and whether they\u2019re service providers or third parties?<\/li>\n<li><strong>Whether the data is sensitive<\/strong>\u00a0and if these categories are necessary to achieve your goals?<\/li>\n<li><strong>Do you use or disclose<\/strong> personal information in a way that would fall under categories of \u201cselling\u201d, \u201csharing\u201d, or other applicable terms?<\/li>\n<\/ul>\n<h2>3. Transparency and individual rights.<\/h2>\n<p>Privacy experts recognize that transparency is not just about making the privacy notice public, but about ensuring that it is comprehensive, relevant, and understandable.<\/p>\n<p>Most regulations require you to:<\/p>\n<ul>\n<li><strong>Notify individuals<\/strong> at or before the point of data collection, use, and disclosure of personal information.<\/li>\n<li><strong>Provide choice<\/strong> for the collection, use, or disclosure of personal information.<\/li>\n<li><strong>Include the contact information<\/strong> for the organization.<\/li>\n<\/ul>\n<p>Under the <a href=\"https:\/\/trustarc.com\/regulations\/ccpa-cpra\/\" target=\"_blank\" rel=\"noopener\">CCPA<\/a>, among other requirements, companies need to provide:<\/p>\n<ul>\n<li>A clear, conspicuous <em>Do Not Sell or Share My Personal Information<\/em> opt-out link on your website.<\/li>\n<li>Categories of personal information sold or shared, and to whom.<\/li>\n<li>Information on the individual rights and how to exercise these rights.<\/li>\n<\/ul>\n<p>Enforcement agencies have been increasingly focusing their attention on the notice and transparency requirements. It is very important to get this right and ensure that your data processing practices are clear and that you have appropriate measures in place.<\/p>\n<p><strong>Remember<\/strong>: The privacy notice is the frontline of your data trust strategy.<\/p>\n<h2>4. Operationalization and technical implementation: Turn policy into practice<\/h2>\n<p>So you&#8217;ve assessed your obligations and updated your notice\u2014great. Now ensure that the mechanisms described in the privacy notice are fully implemented and that your systems support privacy requests.<\/p>\n<p>Here\u2019s how to make it real:<\/p>\n<ul>\n<li><strong>Policies and procedures:<\/strong> Establish workflows for handling <a href=\"https:\/\/trustarc.com\/products\/consent-consumer-rights\/individual-rights-manager\/\" target=\"_blank\" rel=\"noopener\">consumer rights requests<\/a>; access, deletion, choice such as opt-out of sale\/share.<\/li>\n<li><strong>Technical implementation:<\/strong> Create opt-out tools that are easy to use and aligned with regulatory expectations. Avoid <a href=\"https:\/\/trustarc.com\/resource\/ux-dark-patterns-consent-data-collection\/\" target=\"_blank\" rel=\"noopener\">dark patterns<\/a>.<\/li>\n<li><strong>Minimization:<\/strong> Apply data minimization and ensure you do not collect personal information that is not necessary to achieve your goals. Always follow the regulations and best practices.<\/li>\n<li><strong>Training<\/strong>: Ensure internal teams know how to process requests and handle data according to policy and the applicable laws.<\/li>\n<\/ul>\n<p><strong>Operational oversight:<\/strong><\/p>\n<ul>\n<li>Monitor your systems for compliance drift.<\/li>\n<li>Audit vendors regularly.<\/li>\n<li>Update your internal documentation alongside public-facing policies.<\/li>\n<\/ul>\n<p>A privacy program has many parts, some of which are visible, such as a privacy notice. But many others are unseen, such as staff training, internal policies and other documents, or ongoing monitoring. Always ensure that what you display publicly is matched by your practices behind the scenes.<\/p>\n<h3>Master the modern data exchange<\/h3>\n<p>Selling and sharing personal information touches everything from marketing and product design to customer service and executive decision-making. That\u2019s why <a href=\"https:\/\/trustarc.com\/resource\/build-privacy-program-adapts-scales\/\" target=\"_blank\" rel=\"noopener\">successful privacy programs<\/a> aren\u2019t reactive. They\u2019re proactive, process-driven, and built on knowledge, communication, and control.<\/p>\n<p>To thrive in today\u2019s privacy-first landscape, you must:<\/p>\n<ul>\n<li>Know your legal obligations across every relevant jurisdiction.<\/li>\n<li>Inventory your data and understand how it flows.<\/li>\n<li>Communicate transparently with customers and regulators alike.<\/li>\n<li>Operationalize your opt-outs and rights mechanisms with precision.<\/li>\n<\/ul>\n<p>Yes, the rules are evolving. But so are the tools, frameworks, and best practices to help you manage it. And when you get it right, you don\u2019t just avoid fines\u2014you earn customer trust, boost your brand, and position privacy as a competitive advantage.<\/p>\n<h5>Continue mastering the privacy essentials by reviewing all the resources in the Privacy PowerUp series.<\/h5>\n\t\t\t\t\t\t\t\t\t<div class=\"question-box-multiple\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"question-box bg-dark\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/icon_Checklist_Small.svg\" class=\"attachment-full size-full\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>Selling and Sharing: Privacy Rules You Can\u2019t Ignore<\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/trustarc.com\/resource\/privacy-selling-sharing-rules-explained\" target=\"_blank\" rel=\"noreferrer\" class=\"cta\">View now<\/a>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"question-box bg-dark\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/icon_High-Performance_Small.svg\" class=\"attachment-full size-full\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>PowerUp Your Privacy<\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400\">Watch all the videos in the Privacy PowerUp series \u2013 designed to help professionals master the privacy essentials.<\/span><\/p>\n<a href=\"https:\/\/trustarc.com\/resource\/privacy-powerup-series\/\" target=\"_blank\" rel=\"noreferrer\" class=\"cta\">Watch now<\/a>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<p>Read the next article in this series: #14 <a href=\"https:\/\/trustarc.com\/resource\/privacy-approved-vendor-management-program\/\" target=\"_blank\" rel=\"noopener\"><em>Building a Privacy Approved Vendor Management Program.<\/em><\/a><\/p>\n<p><strong>Read more from the Privacy PowerUp Series:<\/strong><\/p>\n<ol>\n<li><a href=\"https:\/\/trustarc.com\/resource\/getting-started-in-privacy\/\">Getting Started in Privacy<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/data-collection-minimization-retention-deletion-necessity\/\">Data Collection, Minimization, Retention, Deletion, and Necessity<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/building-data-inventory-mapping-ropa\/\" target=\"_blank\" rel=\"noopener\">Data Inventories, Mapping, and Records of Process<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/understanding-individual-rights\/\" target=\"_blank\" rel=\"noopener\">Understanding Data Subject Rights (Individual Rights) and Their Importance<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/\" target=\"_blank\" rel=\"noopener\">The Foundation of Privacy Contracting<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/choice-consent-data-privacy\/\" target=\"_blank\" rel=\"noopener\">Choice and Consent: Key Strategies for Data Privacy<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/international-data-transfers-onward-transfers\/\" target=\"_blank\" rel=\"noopener\">Managing the Complexities of International Data Transfers and Onward Transfers<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/emerging-technologies-privacy-ai-machine-learning\/\" target=\"_blank\" rel=\"noopener\">Emerging Technologies in Privacy: AI and Machine Learning<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/privacy-program-management-buy-in-governance-hierarchy\/\" target=\"_blank\" rel=\"noopener\">Privacy Program Management: Buy-In, Governance, and Hierarchy<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/managing-privacy-across-organization\/\" target=\"_blank\" rel=\"noopener\">Managing Privacy Across the Organization<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/assess-the-risk-before-it-hits\/\" target=\"_blank\" rel=\"noopener\">Assess the Risk Before it Hits<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/contracts-that-count-data-processing-agreement\/\" target=\"_blank\" rel=\"noopener\">Contracts that Count: Mastering the 10 Most Negotiated Provisions in a Data Processing Agreement<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/\" target=\"_blank\" rel=\"noopener\">Selling and Sharing Personal Information<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/privacy-approved-vendor-management-program\/\" target=\"_blank\" rel=\"noopener\">Building a Privacy-Approved Vendor Management Program<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/tracking-technologies-adtech-privacy-minefield\/\" target=\"_blank\" rel=\"noopener\">Tracking Technologies: The Hidden Backbone of AdTech and the Looming Privacy Minefield<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/data-inventory-next-level-classification\/\" target=\"_blank\" rel=\"noopener\">Data Inventory: Next-Level Classification for Privacy Professionals<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/incident-incoming-now-what\/\" target=\"_blank\" rel=\"noopener\">Incident Incoming\u2013Now What?<\/a><\/li>\n<\/ol>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<div class=\"right sm\">\n\t\t\t\t<div class=\"share-it\">\n\t\t\t\t\t<strong class=\"title block uppercase\">Follow us<\/strong>\n\t\t\t\t\t<div class=\"soc-list\">\n\t\t\t\t\t\t<a href=\"https:\/\/www.linkedin.com\/company\/trustarc\/\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/li-dark.svg\" alt=\"\" \/><\/a>\n\t\t\t\t\t\t<a href=\"\nhttps:\/\/twitter.com\/TrustArc\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/tw-dark.svg\" alt=\"\" \/><\/a>\n\t\t\t\t\t\t<a href=\"javascript:;\" id=\"copy-url\"><img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/link-dark.svg\" alt=\"\" \/><\/a>\n\t\t\t\t\t\t<span class=\"copied\" style=\"display:none;\">Link Copied!<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"key-topics\">\n\t\t\t\t\t\t<strong class=\"title block uppercase\">Key Topics<\/strong>\n\t\t\t\t\t\t<ul>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a href=\"https:\/\/trustarc.com\/topic-resource\/consent-management\/\" class=\"badge\">Consent Management<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a href=\"https:\/\/trustarc.com\/topic-resource\/data-processing\/\" class=\"badge\">Data Processing<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a href=\"https:\/\/trustarc.com\/topic-resource\/risk-management\/\" class=\"badge\">Risk Management<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a href=\"https:\/\/trustarc.com\/topic-resource\/vendor-management\/\" class=\"badge\">Vendor Management<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"cta-area\">\n\t\t\t\t\t<p>Get the latest resources sent to your inbox<\/p>\n\t\t\t\t\t<a href=\"\/subscription-center\/\" class=\"cta\">Subscribe<\/a>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t\n\n\t\t<section id=\"block_471e28e5498d5ddb51041dfaedc437a8\" class=\"resource-section\">\n\t\t\t<div class=\"container\">\n\t\t\t\t\t\t\t\t\t<div class=\"resource-head\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<h2>Related resources<\/h2>\n\t\t\t\t\t\t\t<a href=\"\/resources\/\" target=\"_blank\" rel=\"noreferrer\" class=\"cta block\">View all resources<\/a>\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<div class=\"two-columns\">\n\t\t\t\t\t\t<div class=\"left\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/trustarc.com\/resource\/privacy-powerup-series\/\" class=\"resource-single \">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"img-holder\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"560\" height=\"140\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/01\/res-feat-woven-pink-test-560x140.png\" class=\"attachment-560x140 size-560x140 wp-post-image\" alt=\"\" srcset=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/01\/res-feat-woven-pink-test-560x140.png 560w, https:\/\/trustarc.com\/wp-content\/uploads\/2024\/01\/res-feat-woven-pink-test-300x75.png 300w, https:\/\/trustarc.com\/wp-content\/uploads\/2024\/01\/res-feat-woven-pink-test.png 610w\" sizes=\"auto, (max-width: 560px) 100vw, 560px\" \/>\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"resource-label uppercase\">Webinars and Videos<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h3>Privacy PowerUp Series<\/h3>\n\t\t\t\t\t\t\t\t\t<p>Are you a compliance pro, lawyer, or just curious about privacy? The Privacy PowerUp series is the perfect launchpad for mastering all of the privacy essentials.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div><div class=\"right\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/trustarc.com\/resource\/privacy-powerup-privacy-program-management\/\" class=\"resource-single \">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"img-holder\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"560\" height=\"140\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-woven-gray-560x140.png\" class=\"attachment-560x140 size-560x140 wp-post-image\" alt=\"\" srcset=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-woven-gray-560x140.png 560w, https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-woven-gray-300x75.png 300w, https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-woven-gray.png 610w\" sizes=\"auto, (max-width: 560px) 100vw, 560px\" \/>\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"resource-label uppercase\">eBooks<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h3>Privacy PowerUp<\/h3>\n\t\t\t\t\t\t\t\t\t<p>Master data privacy essentials with the Privacy PowerUp eBook. Learn strategies, common regulations, and key insights to advance your career and protect data.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/section>\n\t","protected":false},"excerpt":{"rendered":"<p>Selling or sharing personal data? Learn how to stay compliant, build trust, and operationalize privacy in a world where nuance is nonnegotiable.<\/p>\n","protected":false},"featured_media":1691,"template":"","topic-resource":[67,65,68,74],"type-resource":[6],"class_list":["post-7559","resource","type-resource","status-publish","has-post-thumbnail","hentry","topic-resource-consent-management","topic-resource-data-processing","topic-resource-risk-management","topic-resource-vendor-management","type-resource-articles"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.4 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Selling and Sharing Personal Information | TrustArc<\/title>\n<meta name=\"description\" content=\"Selling or sharing personal data? Learn how to stay compliant, build trust, and operationalize privacy in a world where nuance is nonnegotiable.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/selling-sharing-personal-information\\\/\",\"url\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/selling-sharing-personal-information\\\/\",\"name\":\"Selling and Sharing Personal Information | TrustArc\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/trustarc.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/selling-sharing-personal-information\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/selling-sharing-personal-information\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/trustarc.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/res-feat-plus-purple.png\",\"datePublished\":\"2025-09-18T13:30:00+00:00\",\"dateModified\":\"2025-09-24T14:01:31+00:00\",\"description\":\"Selling or sharing personal data? Learn how to stay compliant, build trust, and operationalize privacy in a world where nuance is nonnegotiable.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/trustarc.com\\\/resource\\\/selling-sharing-personal-information\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/selling-sharing-personal-information\\\/#primaryimage\",\"url\":\"https:\\\/\\\/trustarc.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/res-feat-plus-purple.png\",\"contentUrl\":\"https:\\\/\\\/trustarc.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/res-feat-plus-purple.png\",\"width\":610,\"height\":152},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/#website\",\"url\":\"https:\\\/\\\/trustarc.com\\\/\",\"name\":\"TrustArc\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/trustarc.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Selling and Sharing Personal Information | TrustArc","description":"Selling or sharing personal data? Learn how to stay compliant, build trust, and operationalize privacy in a world where nuance is nonnegotiable.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/","url":"https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/","name":"Selling and Sharing Personal Information | TrustArc","isPartOf":{"@id":"https:\/\/trustarc.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/#primaryimage"},"image":{"@id":"https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/#primaryimage"},"thumbnailUrl":"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-plus-purple.png","datePublished":"2025-09-18T13:30:00+00:00","dateModified":"2025-09-24T14:01:31+00:00","description":"Selling or sharing personal data? Learn how to stay compliant, build trust, and operationalize privacy in a world where nuance is nonnegotiable.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/#primaryimage","url":"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-plus-purple.png","contentUrl":"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-plus-purple.png","width":610,"height":152},{"@type":"WebSite","@id":"https:\/\/trustarc.com\/#website","url":"https:\/\/trustarc.com\/","name":"TrustArc","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/trustarc.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/resource\/7559","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/resource"}],"about":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/types\/resource"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/media\/1691"}],"wp:attachment":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/media?parent=7559"}],"wp:term":[{"taxonomy":"topic-resource","embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/topic-resource?post=7559"},{"taxonomy":"type-resource","embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/type-resource?post=7559"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}