Aggregation

Aggregation is a form of PROCESSING privacy harm under the Solove taxonomy. Aggregation is defined as combining various pieces of personal information.

A credit bureau combining an individual's payment history from multiple creditors.

Laws and Regulations

The following laws and regulations address the Aggregation harm.

• 44 U.S.C. Chapter 33 (United States)
• 5 U.S.C. §552a (United States)
• 653-13.2(148, 272C). Standards of practice—appropriate pain management. (United States)
• Alabama Data Breach Notification Act of (2018) (United States)
• Americans with Disabilities Act of 1990 (United States)
• CH. 48.1. Consumer Privacy Protection Act. (United States)
• CH. 62. Protection of Personal Information. (United States)
• CH. 70.02. Medical Records—Health Care Information Access and Disclosure. (United States)
• CH. 90. Medical Records. (United States)
• Cable Communications Policy Act of 1984 (United States)
• California Consumer Privacy Act of (2018) (United States)
• California Privacy Rights Act (United States)
• Children's Online Privacy Protection Rule (2000) (United States)
• Clinical Laboratory Improvement Amendments (United States)
• Communications Act of 1934 (United States)
• Cybersecurity Information Sharing Act of 2015 (United States)
• Do-Not-Call Implementation Act (United States)
• FLA. HB 1189 (United States)
• Foreign Intelligence Surveillance Act of 1978 (United States)
• Health Insurance Portability and Accountability Act of 1996 (United States)
• Identity Theft and Assumption Deterrence Act of 1998 (United States)
• Individuals with Disabilities Education Improvement Act of 2004 (United States)
• MD. HB 901 (2019) (United States)
• MD. SB 613. Consumer Personal Information Privacy. (United States)
• NH. HB 1262. Student Assessment Data Privacy. (United States)
• NH. SB 316. Protection of Personal Information. (United States)
• NV. SB 220. Internet Privacy. (United States)
• NV. SB 538. Internet Privacy. (United States)
• Patient Safety and Quality Improvement Act (United States)
• Personal Data Protection Law (KVKK) (Turkey)
• Privacy Act of 1974 (United States)
• Rachel's Test (United States)
• Video Privacy Protection Act (United States)
• §1201C-§1206C. Online and Personal Privacy Protection. (United States)
• §1203. Civil actions for false claims. (United States)
• §1205C. Posting of privacy policy by operators of commercial online sites and services. (United States)
• §144.192. Treatment of Biological Specimens and Health Data held by The Department of Health and Health Boards. (United States)
• §275:74. Use of Social Media and Electronic Mail. (United States)
• §49-1-702. Data Accessibility, Transparency and Accountability Act; Part Definitions. (United States)
• §603A.340. Notice regarding covered information collected by operator: Operator required to make available to consumers; contents; period to remedy failure to comply with requirements; exception. (United States)
• §62V.06. Data Practices. (United States)
• §72A.492-§72A.505. Insurance. (United States)