Data procurement diligence hub: provenance, sensitive-category exclusions, retention controls, and post-FTC enforcement guidance for buyer teams.