30932: Campaign rejected: Opt-in data shared with third parties without proper disclosure in privacy policy

Your A2P 10DLC campaign was rejected because opt-in consent data is being shared with third parties without proper disclosure. TCPA regulations and carrier guidelines require that any sharing of consumer opt-in information with third-party entities must be clearly disclosed in your privacy policy and opt-in flow.

• Privacy policy indicates data sharing: Your privacy policy indicates mobile information may be shared with third parties or affiliates for marketing purposes.
• Consent shared without disclosure: Opt-in consent is collected by one entity but shared with another entity without explicit disclosure.
• Lead generation data sharing: Lead generation campaigns that pass opt-in data to multiple downstream recipients.
• Affiliate network sharing: Affiliate marketing arrangements where consumer consent is shared across partner networks.

• Update privacy policy: Explicitly state that mobile information will not be shared with third parties for marketing purposes.
• Disclose data sharing at opt-in: If data sharing is required, ensure explicit and prominent disclosure at the point of opt-in.
• Obtain direct consent: For lead generation use cases, ensure each recipient company obtains its own direct consent.
• Review TCPA requirements: Review TCPA requirements for consent transfer and third-party data sharing.
• Contact support: If you believe this rejection is incorrect, contact support.

• A2P 10DLC Registration Guide
• Campaign Registration Best Practices
• CTIA Messaging Principles and Best Practices