{
  "id": "POL-078",
  "slug": "pol-078",
  "title": "A political brand is held to the same data-sharing ban",
  "statement": "The third-party data-sharing prohibition applies to a political brand's policy exactly as it does to a commercial one.",
  "rationale": "Political organisations routinely share supporter lists with allied committees and vendors, and treat it as normal practice rather than as data sharing — Twilio names political campaigns that buy, sell or share consumer information specifically. The consumer protection is identical: someone who consented to hear from one committee did not consent to hear from every committee it works with.",
  "layer": "POLICY_PAGE",
  "layerSlug": "policy-page",
  "object": "privacy policy body",
  "severity": "BLOCKING",
  "detectability": [
    "CRAWL"
  ],
  "failureClass": "TERMINAL_POLICY",
  "artifact": "privacy_policy",
  "authorities": [
    "Twilio"
  ],
  "codes": [
    {
      "provider": "Twilio",
      "code": "30951",
      "remediable": false,
      "generation": "gen2"
    }
  ],
  "applicability": {
    "useCases": [
      "POLITICAL"
    ]
  },
  "applicabilityText": "Applies when the use case is POLITICAL.",
  "universal": false,
  "remediation": "Exclude mobile numbers and messaging consent from every list-exchange, coalition or vendor-sharing clause in the policy, and stop the practice for the numbers in this programme. Done when the policy says supporter mobile data is not shared with allied organisations.",
  "notes": "An anti-exemption rule. It exists because the sector reads the general prohibition as aimed at commercial marketing, so stating it for political brands separately is what makes it land.",
  "phase": "approval",
  "automated": true,
  "url": "https://ekas.io/rules/10dlc/policy-page/pol-078/",
  "markdown": "https://ekas.io/rules/10dlc/policy-page/pol-078.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}