Regulations governing how companies share personal data with third parties, including requirements for consent and safeguards.