Duty LXD-1127
Processes de-identified data, in New Hampshire
New Hampshire Data Privacy Act, de-identified and pseudonymous datasince 4 lines
RSA 507-H:1, XIV and XXV; RSA 507-H:9 · Read the law's page
- To hold data as de-identified under the New Hampshire Data Privacy Act, take reasonable measures to ensure the data cannot be associated with an individual (RSA 507-H:9, I(a)).
- Publicly commit to maintaining and using de-identified data without attempting to reidentify it (RSA 507-H:9, I(b)).
- Contractually obligate every recipient of de-identified data to comply with all provisions of the chapter (RSA 507-H:9, I(c)).
- When you disclose pseudonymous or de-identified data, exercise reasonable oversight to monitor compliance with the contractual commitments attached to it, and take appropriate steps to address any breach of those commitments (RSA 507-H:9, V).