and each commonwealth, territory, or possession of the United States. (7) Third party The term third party means an individual or entity that uses or receives sensitive personal information or behavioral data obtained by or on behalf of an operator, other than— (A) a service provider of an operator to whom the operator discloses the consumer’s sensitive personal information for an operational purpose pursuant to an agreement that prohibits the person receiving the personal information from using or disclosing the personal information for any purpose other than the purposes contemplated by the agreement