Topic

Aggregated Data

Explore how privacy laws treat aggregated data, when combined information may still identify individuals, and why aggregation alone does not always eliminate privacy risk. This tag covers regulatory guidance, enforcement actions, re-identification concerns, contractual safeguards, data minimization, and practical compliance considerations for organizations using or sharing aggregated datasets.

When “Aggregated” Isn’t Anonymous: The New York Attorney General Pushes the Boundaries of App Data Disclosures

The New York Attorney General’s Matis case shows that “aggregated” data is not necessarily anonymous. If a third party can de-aggregate and re-identify individuals, the sharing should be disclosed—and contracts should expressly prohibit re-identification.

Subscribe to The de la Torre Review