> data that companies pass through third parties, like analytics services

That's exactly what this law was meant to prevent.