CCPA-1798.148-06
Requirement
1798.148
Contract compliance for testing/validation of deidentification
Description
When engaging a person or entity to attempt reidentification for testing, analysis, or validation of deidentification techniques, must ensure the contract bans any other use or disclosure of the reidentified information and requires the return or destruction of the information upon completion.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
CCPA-1798.148-01
Prohibition
Prohibition on reidentifying deidentified information except for specified purposes
CCPA-1798.148-02
Requirement
Compliance with federal and state privacy laws for reidentified information
CCPA-1798.148-03
Transparency
Inclusion of deidentified patient information disclosure in contracts
CCPA-1798.148-04
Transparency
Inclusion of reidentification prohibition clause in contracts
CCPA-1798.148-05
Requirement
Inclusion of third-party disclosure restrictions in contracts
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started