Who will interpret what is meant by "service provider"? If it is just a data seller who buys it without receiving it in the course of providing a service to the first company, is it covered? Will it require a ruling to know for sure?