Minnesota Consumer Data Privacy Act, definitions (deidentified data) (Minn. Stat. 325M.11(k))
Minnesota uses the three-part de-identification test inside the definition.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“(k) "Deidentified data" means data that cannot reasonably be used to infer information about or otherwise be linked to an identified or identifiable natural person or a device linked to an identified or identifiable natural person, provided that the controller that possesses the data: ... (1) takes reasonable measures to ensure that the data cannot be associated with a natural person; ... (2) publicly commits to process the data only in a deidentified fashion and not attempt to reidentify the data; and ... (3) contractually obligates any recipients of the information to comply with all provisions of this paragraph.”
Where it was read
Also read from the same source
- Minnesota Consumer Data Privacy Act, definitions (sale) (Minn. Stat. 325M.11(u))
- Minnesota Consumer Data Privacy Act, responsibilities of controllers (sensitive data consent) (Minn. Stat. 325M.16(d))
- Minnesota Consumer Data Privacy Act, effective date (Laws 2024, ch. 121, art. 5, sec. 14) (Minn. Stat. 325M.10, note)
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide