Requires small businesses, as defined by the United States Small Business Administration, to receive consent from consumers before selling consumers’ sensitive data;*

Why carve out exceptions.....