@podehaye @jason_kint @kfranasz Here, if a co. is required to report to the SEC, and they're taking less than a squeaky-clean approach on #CCPA, they're taking a risk that must be disclosed. (The co. represents to $FB that they have honored all opt-outs so had better not be passing any GPC users' info via CAPI)