For networks operating on behalf of advertisers, direct access to personal data is often restricted — by contract, by regulation, or by policy.
In these environments, lead operations must still be controlled, auditable, and enforceable. The question is how.