Bulk U.S. Sensitive Personal Data – DOJ

The term bulk U.S. sensitive personal data means a collection or set of sensitive personal data relating to U.S. persons, in any format, regardless of whether the data is anonymized, pseudonymized, de-identified, or encrypted, where such data meets or exceeds the applicable threshold set forth in 搂 202.205.

Bulk sensitive personal data categories & thresholds

There are six categories of U.S. sensitive personal data defined in the Department of Justice (DOJ) rule for with the following thresholds:

  • collected about or maintained on more than 1,000 U.S. persons, or, in the case of human genomic data, more than 100 U.S. persons.
  • collected about or maintained on more than 1,000 U.S. persons.
  • collected about or maintained on more than 1,000 U.S. persons.
  • collected about or maintained on more than 10,000 U.S. persons.
  • collected about or maintained on more than 10,000 U.S. persons.
  • collected about or maintained on more than 100,000 U.S. persons.

Resources