“Research shows that few people think sharing your personal information with third parties is a good idea. Third parties seeking to use consumers’ personal data will need to show they have proper safeguards in place.”