Apply pseudonymisation and de-identification under Sections 14-4610 and 14-4611 to enable lawful internal research + product improvement + aggregated reporting while protecting consumer privacy. Pseudonymised Data definition (Section 14-4601(V)) - personal data that cannot be attributed to specific consumer without use of additional information kept separately and subject to technical and organisational measures preventing re-identification. De-Identified Data definition - cannot reasonably be linked to consumer or household + technical safeguards + business processes preventing re-identification + publicly commit to maintain without re-identifying + contractually bind recipients. Aggregated Consumer Information - statistical de-identified about group/category from which individual identities removed + not linked to any consumer. Internal research exemption (Section 14-4611) permits processing without consent for internal product improvement + bug repair + security maintenance + scientific research in public interest under privacy-by-design + research ethics review board + data destruction post-research timeline. Maryland Consumer Health Information Act (separate) interaction. HIPAA Safe Harbor / Expert Determination cross-walk for health data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.