Duty LXD-1124
Processes de-identified data, in Minnesota
Minnesota Insurance Fair Information Reporting Act: disclosure for actuarial or research studiessince 3 lines
Minn. Stat. § 72A.502, subd. 7 · Read the law's page
- If you are an insurer, insurance agent or insurance-support organization and you disclose personal or privileged information without a written authorization to conduct actuarial or research studies, make sure that no individual may be identified in the actuarial or research report (Minn. Stat. 72A.502, subd. 7(1)).
- Make sure that materials allowing an individual to be identified are returned or destroyed as soon as they are no longer needed (Minn. Stat. 72A.502, subd. 7(2)).
- Make sure that the actuarial or research organization agrees not to disclose the information unless Minn. Stat. 72A.502 would otherwise permit the disclosure if you made it (Minn. Stat. 72A.502, subd. 7(3)).
Health care reform: encounter data submitted as de-identified datasince 1 line
Minn. Stat. § 62U.04, subd. 4(a)(1) · Read the law's page
- If you are a health plan company, dental organization or third-party administrator, submit encounter data on a monthly basis to the private entity the commissioner of health designates, in the form and manner the commissioner specifies, and submit it only as de-identified data as described under 45 CFR 164.514 (Minn. Stat. 62U.04, subd. 4(a)(1)).
Minnesota Consumer Data Privacy Act, deidentified and pseudonymous datasince 3 lines
Minn. Stat. § 325M.15 · Read the law's page
- Do not attempt to identify the subjects of deidentified or pseudonymous data held for a Minnesota controller unless that controller, which caused the data to be deidentified or pseudonymized, expressly authorizes it (Minn. Stat. 325M.15(d)).
- Do not attempt to identify the subjects of data collected with only pseudonymous identifiers (Minn. Stat. 325M.15(e)).
- If you use pseudonymous or deidentified data as a controller, monitor compliance with the contractual commitments the data is subject to and take appropriate steps to address any breach of them (Minn. Stat. 325M.15(c)).