Target shares your personal data with numerous outside companies that help run its business — including payment processors, data analytics firms, and marketing companies — with a contractual requirement that they only use your data for Target's purposes.
Your personal information is shared with Target's network of service providers across payment processing, analytics, and marketing functions — the contractual 'purpose limitation' provides some protection but does not prevent broad internal use of your data across Target's vendor ecosystem.
Cross-platform context
See how other platforms handle Data Sharing with Third-Party Service Providers and similar clauses.
Compare across platforms →While Target contractually limits service providers' use of your data, the sheer breadth of categories (including data analytics and marketing) means your personal information is routinely transmitted to a wide network of third-party companies.
REGULATORY FRAMEWORK: Service provider data sharing implicates CCPA/CPRA §1798.140(ag) (service provider definition and limitations), which requires written contracts prohibiting service providers from selling or sharing data or using it for their own commercial purposes. GDPR Art. 28 requires formal Data Processing Agreements for all processors. FTC Act Section 5 applies to deceptive representations about service provider data use.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.