I don't know. I do know that in these kinds of situations, the contract typically spells out clearly what, exactly, the contractor is going to do and how, though.
Even though it is usually reviewed, the methods of data gathering are usually not spelled out in the contracts themselves. Instead you have a distribution of liability where the data broker agency assumes the risk of having gathered and/or sold the data incorrectly to the purchaser.
