Is the buyer, or anyone it may pass the data to, a foreign person, and does the dataset contain US sensitive personal data above the bulk thresholds?
Buyer screened for ownership by or location in China, Russia, Iran, North Korea, Cuba or Venezuela; data checked against thresholds (for example biometric identifiers over 1,000 US persons, health or financial data over 10,000, covered identifiers over 100,000); onward-transfer clause in the licence for foreign buyers.
Dated 11 Oct 2026Source checked 11 Oct 2026Quote found on its page again 16 Oct 2026Basis: stated
In the source's own words
“(b) Biometric identifiers collected about or maintained on more than 1,000 U.S. persons; ... (d) Personal health data collected about or maintained on more than 10,000 U.S. persons; (e) Personal financial data collected about or maintained on more than 10,000 U.S. persons; (f) Covered personal identifiers collected about or maintained on more than 100,000 U.S. persons”
Where it was read
28 CFR 202.205 (bulk), checked 11 Oct 2026
Everything read from this source (1)Archived copy, 9 Oct 2026
28 CFR 202.302(a), checked 11 Oct 2026
Everything read from this source (2)Archived copy, 16 Oct 2026
Also read from the same source
What it is about
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in these 3 guides