Duty LXD-1116
Processes de-identified data, in Connecticut
Connecticut Data Privacy Act, de-identified and pseudonymous datasince 4 lines
Conn. Gen. Stat. § 42-523 · Read the law's page
- To hold data as de-identified under the Connecticut Data Privacy Act, take reasonable measures to ensure that it cannot be associated with an individual (Conn. Gen. Stat. § 42-523(a)(1)).
- Publicly commit to maintaining and using the de-identified data without attempting to re-identify it (Conn. Gen. Stat. § 42-523(a)(2)).
- Contractually obligate every recipient of the de-identified data to comply with all provisions of sections 42-515 to 42-525 (Conn. Gen. Stat. § 42-523(a)(3)).
- When you disclose pseudonymous or de-identified data, exercise reasonable oversight to monitor compliance with the contractual commitments the data is subject to, and take appropriate steps to address any breach of them (Conn. Gen. Stat. § 42-523(e)).
Connecticut insurance information practices, disclosure for actuarial or research studiesin force3 lines
Conn. Gen. Stat. § 38a-988(9) · Read the law's page
- If you are an insurance institution, agent or insurance-support organization, disclose personal or privileged information about an individual for an actuarial or research study only if no individual may be identified in any actuarial or research report (section 38a-988(9)(A)).
- Make sure materials in which the individual may be identified are returned or destroyed as soon as they are no longer necessary (section 38a-988(9)(B)).
- Have the actuarial or research organization agree not to disclose the information unless the disclosure would otherwise be permitted by section 38a-988 if made by an insurance institution, agent or insurance-support organization (section 38a-988(9)(C)).