But instead, Flo allowed third parties, including Meta, to harvest data from what was known as "Custom App Events," which ...

As drafted, the APRA has sweeping coverage and would apply to entities that (1) determine the purpose and means of collecting, processing, retaining, or transferring covered data; and that (2) are ...