The company or third party is accountable to the cooperative for its data sharing practices, and needs to cooperate with the cooperative’s efforts to protect user rights.