Many businesses use other businesses to provide services for them. For example, a retailer may contract with a payment card processor to process customer credit card transactions or a shipping company to deliver orders. These entities cannot share or use personal information unless they are fulfilling their contractual obligations. If this is the case they qualify as “service providers” under the CCPA and Pipeda, and also as “processors” under the GDPR and the UK-Data Protection Act.