Virginia CDPA
De-identified and pseudonymous data, limitations and enforcement (59.1-581 to 59.1-584) – Virginia CDPA

Virginia CDPA 59.1-581 A: Duties for de-identified data

What does 59.1-581 A require?

A controller holding de-identified data takes reasonable measures so it cannot be associated with a person, publicly commits not to try to re-identify it, and contractually binds recipients to the Act; it exercises reasonable oversight of those commitments and acts on breaches (subsection E).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in De-identified and pseudonymous data, limitations and enforcement (59.1-581 to 59.1-584) – Virginia CDPA

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Virginia CDPA controls