StacksVerified U.S. regulatory reference

28 CFR §202.206

Verified against eCFR.gov as of June 20, 2026View official text on eCFR.gov ↗
The term bulk U.S. sensitive personal data means a collection or set of sensitive personal data relating to U.S. persons, in any format, regardless of whether the data is anonymized, pseudonymized, de-identified, or encrypted, where such data meets or exceeds the applicable threshold set forth in § 202.205.