Who controls de-identification, and use restrictions
The holder selects or jointly selects the de-identification provider, approves the protocol and requires certification before anything leaves; the licence restricts buyer use and allocates privacy risk.
Dated 6 Oct 2026Source checked 6 Oct 2026Quote found on its page again 16 Oct 2026Basis: stated
In the source's own words
“Select (or jointly select) the de-identification provider, approve the protocol, and require certification to the company's satisfaction.”
Where it was read
Frankfurt Kurnit (Goldberg), Legal 500, checked 6 Oct 2026
Also read from the same source
- Frankfurt Kurnit Klein & Selz (Daniel M. Goldberg) and companies selling data: legal or policy, company records (email, chat, code, HR)
- Does any of the data belong to or describe your customers, and do your customer contracts and data processing agreements allow using it for anything other than serving them?
- Does the data contain other companies' confidential information, such as partner documents, pricing, roadmaps or anything shared under an NDA?
- Is any of it data or content you licensed from someone else, such as purchased contact lists, research reports, stock media, fonts or design kits?
- Do the records include staff discussing pay, working conditions or union matters, or is any workforce covered by a collective bargaining agreement?
- Does the data include legal advice, litigation material, or trade secrets (yours or other companies')?
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide