They hid who else is taking.
Third-party data collection not disclosed in privacy policy. Vendors operate on a site collecting data without being named in the privacy policy, terms of service, or consent UI. The site owner may not even know they exist.
How This Escalates BTI-C Findings
Escalates any BTI-C finding from a technical violation to a disclosure violation. If a vendor is collecting data (C03, C08, C14) AND is undisclosed, the legal exposure multiplies.
Related Advisories
No published advisories reference this code yet.
Investigations are ongoing.
Blackout uses security frameworks to protect AGAINST vendors, not FOR them. We do not notify vendors. We do not provide remediation windows. If you're using a vendor flagged by this code, the advisory is your evidence.
Permanent URL: deployblackout.com/bti/codes/X01