An agent exports a dataset of 12,000 customer BVNs to an AWS S3 bucket in us-east-1. No consent. No data transfer agreement.