The CPRA more clearly defines third-party business relationships, e.g. business partners, contractors, or service providers, with which contractual agreements are required. Companies also need to ensure third parties comply with relevant regulations. The CPRA further restricts use of collected consumer information (including sensitive information), particularly how it can be shared with third parties or used for targeted advertising or profiling. Contracts must include restrictions on disclosure, sharing, or sale of consumers' personal information, as well as why these actions are necessary.