None of the above I like, and (a) is so vague as to be useless, including if you read the obligations.
>Except as required by applicable Laws, Zed will not provide Customer Data to any person or entity other than Customer’s designees (including pursuant to Section 7) or service providers."
Companies still do it all the time despite "applicable laws". And when the company is sold, all bets are off.
I'd rather they don't get, or keep, any to begin with.