The company or third-party collecting cooperative user’ data might need to allow the cooperative to conduct audits of its data usage and sharing practices, and could be required to provide regular reports on its data sharing activities.