# BRD-275 — Brands that buy, sell or share consumer data are not carried

> A brand whose business is buying, selling or sharing consumer information with third parties must not be registered for A2P messaging.

- **Rule ID:** BRD-275
- **Layer:** Brand (`BRAND`)
- **Checks:** `brand.vertical + brand fields + website content`
- **Severity:** BLOCKING — Breaking this rule gets the submission rejected outright.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** AI judgement over the submitted form; AI judgement over the crawled website or policy page
- **Fix type:** Hard stop — not remediable, resubmission will not help
- **Required by:** Bandwidth, AWS, Bird, Infobip, Sinch, Plivo, Commio
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/brand/brd-275/

## Why this rule exists

The channel rests on consent running from one consumer to one named sender, and a business whose product is the onward movement of consumer data breaks that link by design — whoever eventually messages the consumer is not who they agreed to hear from. It is refused at the brand rather than at the campaign because no campaign copy can repair a consent chain the business model is built to break.

## How to fix it

A lead-generation or data-broker business cannot be registered for A2P messaging. Where the business also has a first-party relationship — its own customers, its own service — register that entity and that programme separately, with consent collected directly and no onward sharing.

## Provider rejection codes

| Provider | Code | Resubmission allowed |
| --- | --- | --- |
| Bandwidth | `7108` | no |
| Sinch | `CR2012` | no |

## Notes

The catalog is explicit that this is a brand-eligibility verdict rather than a site-content finding: the fix is a different channel, not a different page. Its campaign-content twin is CMP-AFFILIATE, which refuses affiliate marketing on the same reasoning one layer down.