Duty LXD-1120
Processes de-identified data, in Indiana
Indiana Consumer Data Protection Act, de-identified datasince 4 lines
Ind. Code §§ 24-15-2-12, 24-15-7-1, 24-15-7-3 · Read the law's page
- To treat data as de-identified under INCDPA, take reasonable measures to ensure that the data cannot be associated with an individual (Ind. Code 24-15-7-1(a)(1)).
- Publicly commit to maintaining and using the de-identified data without attempting to re-identify it (Ind. Code 24-15-7-1(a)(2)).
- Contractually obligate every recipient of the de-identified data to comply with all provisions of chapter 7 (Ind. Code 24-15-7-1(a)(3)).
- When disclosing pseudonymous or de-identified data, exercise reasonable oversight to monitor compliance with the contractual commitments the data is subject to, and take appropriate steps to address any breach of them (Ind. Code 24-15-7-3).
Indiana Consumer Data Protection Act, pseudonymous datasince 2 lines
Ind. Code §§ 24-15-2-25, 24-15-7-2 · Read the law's page
- To claim the pseudonymous data exemption from the consumer rights in Ind. Code 24-15-3-1(b)(1) to (4) and the controller responsibilities in 24-15-4-1(1) to (5), be able to demonstrate that any information necessary to identify the consumer is kept separately (Ind. Code 24-15-7-2).
- Subject that separately kept information to effective technical and organizational controls that prevent you from accessing it (Ind. Code 24-15-7-2).