Before giving a third party access to confidential customer data, you must verify your legal obligations and review your internal