substantive decisionmaking
The term substantive decisionmaking means the process through which decisions regarding significant matters affecting an entity are undertaken, including, as applicable:
(1) Pricing, sales, and specific contracts, including the license, sale, or transfer of sensitive personal data to any third party, including pursuant to a customer, vendor, or joint venture agreement;
(2) Supply arrangements;
(3) Corporate strategy and business development;
(4) Research and development, including location and budget allocation;
(5) Manufacturing locations;
(6) Access to critical technologies, covered investment critical infrastructure, material nonpublic technical information, or sensitive personal data, including pursuant to a customer, vendor, or joint venture agreement;
(7) Physical and cyber security protocols, including the storage and protection of critical technologies, covered investment critical infrastructure, or sensitive personal data;
(8) Practices, policies, and procedures governing the collection, use, or storage of sensitive personal data, including:
(i) The establishment or maintenance of, or changes to, the architecture of information technology systems and networks used in collecting or maintaining sensitive personal data; or
(ii) Privacy policies and agreements for individuals from whom sensitive personal data is collected setting forth parameters regarding whether and how sensitive personal data may be collected, maintained, accessed, or disseminated; or
(9) Strategic partnerships.