Under many circumstances, state privacy laws require businesses to pass a consumer’s valid deletion request to any entity that processes the data on behalf of the business or otherwise is a recipient of the data. These so-called “flow-down” obligations can be challenging to unpack. Here’s a look at the flow-down obligations that may be applicable…