The latest rules don’t go into effect until the end of the year, so until then it’s still technically possible to purchase third party opt-in leads, but they are hard to verify