Third parties won't get you in trouble as long as you have a DPA, but you need to get it. Customer IDs are fine as long as they can't be associated with other

Third parties won't get you in trouble as long as you have a DPA, but you need to get it. Customer IDs are fine as long as they can't be associated with other information anywhere else, but if they can, it's an issue. Sanitation is easy but someone, somewhere will screw it up when you're not looking.