Duty LXD-1126
Processes de-identified data, in Nebraska
Nebraska Data Privacy Act (NDPA), deidentified datasince 4 lines
Neb. Rev. Stat. § 87-1117 · Read the law's page
- To treat data as deidentified, take reasonable measures to ensure that it cannot be associated with an individual (section 87-1117(1)(a)).
- Publicly commit to maintaining and using the deidentified data without attempting to reidentify it (section 87-1117(1)(b)).
- Contractually obligate any recipient of the deidentified data to comply with the Data Privacy Act (section 87-1117(1)(c)).
- When you disclose pseudonymous data or deidentified data, exercise reasonable oversight to monitor compliance with the contractual commitments the data is subject to, and take appropriate steps to address any breach of them (section 87-1117(4)).
Genetic Information Privacy Act, de-identified genetic datain force3 lines
Neb. Rev. Stat. § 87-902(6)(b) · Read the law's page
- To keep genetic data outside the Genetic Information Privacy Act as de-identified data, apply administrative and technical measures to ensure that it cannot be associated with an identifiable consumer (section 87-902(6)(b)(i)).
- Publicly commit to maintain and use the data in de-identified form and not to attempt to reidentify it (section 87-902(6)(b)(ii)).
- Bind every recipient of the data by legally enforceable contractual obligations that prohibit it from attempting to reidentify the data (section 87-902(6)(b)(iii)).