# POL-064 — No clause anywhere in the policy may permit sharing data for third-party marketing

> The whole policy — not just the SMS section — must contain no clause permitting sale, rental, or sharing of personal data for third-party marketing.

- **Rule ID:** POL-064
- **Layer:** Policy pages (`POLICY_PAGE`)
- **Checks:** `privacy policy body (whole document)`
- **Severity:** BLOCKING — Breaking this rule gets the submission rejected outright.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** AI judgement over the submitted form
- **Fix type:** Fix the privacy policy or SMS terms
- **Required by:** TCR, Twilio, T-Mobile, AWS
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/policy-page/pol-064/

## Why this rule exists

Ranked the #3 most-missed check in the catalog. Policies routinely carry the required non-sharing sentence in an SMS block while a general data-sharing clause three sections earlier says the opposite. Reviewers read the whole document and treat the permissive clause as controlling, so a tool that only looks for the good sentence passes a policy that will be rejected.

## How to fix it

Find and remove or narrow every clause permitting data sharing for marketing. Where you must keep a sharing clause for other purposes, carve messaging data out of it explicitly with "excluding text messaging originator opt-in data and consent".

## Provider rejection codes

| Provider | Code | Resubmission allowed |
| --- | --- | --- |
| Twilio (gen2) | `30932` | yes |