Thanks for sharing. It’s interesting to see how they’re implementing it. From the perspective of GDPR at least, I’m pretty sure NYT and its owned sites count a

Thanks for sharing. It’s interesting to see how they’re implementing it. From the perspective of GDPR at least, I’m pretty sure NYT and its owned sites count as one controller/processor, and I think passes the sniff test for case #2 rather than case #3.