On page 2 of the bill, the definition of 'covered customer or subscriber record' includes the following:

   (II)  an  intermediary  service  provider   that   delivers,   stores,   or   processes  communications  of  such  covered person;

Who will interpret what is meant by "service provider"? If it is just a data seller who buys it without receiving it in the course of providing a service to the first company, is it covered? Will it require a ruling to know for sure?

Sounds easily bypassed through layers of indirection. Sadly this is just legal noise. It doesn’t solve the core problem.