{"data":{"id":"us/28-cfr-202.249","jurisdiction":"us","citation":"28 CFR 202.249","heading":"Sensitive personal data.","body":"(a) Definition. The term sensitive personal data means covered personal identifiers, precise geolocation data, biometric identifiers, human `omic data, personal health data, personal financial data, or any combination thereof.\n(b) Exclusions. The term sensitive personal data, and each of the categories of sensitive personal data, excludes:\n(1) Public or nonpublic data that does not relate to an individual, including such data that meets the definition of a “trade secret” (as defined in 18 U.S.C. 1839(3)) or “proprietary information” (as defined in 50 U.S.C. 1708(d)(7));\n(2) Data that is, at the time of the transaction, lawfully available to the public from a Federal, State, or local government record (such as court records) or in widely distributed media (such as sources that are generally available to the public through unrestricted and open-access repositories);\n(3) Personal communications; and\n(4) Information or informational materials and ordinarily associated metadata or metadata reasonably necessary to enable the transmission or dissemination of such information or informational materials.","path":["Title 28—Judicial Administration","CHAPTER I—DEPARTMENT OF JUSTICE","PART 202—ACCESS TO U.S. SENSITIVE PERSONAL DATA AND GOVERNMENT-RELATED DATA BY COUNTRIES OF CONCERN OR COVERED PERSONS","Subpart B—Definitions"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-28.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:25:14Z","sha256":"7bdeb2904a86fab917af2b8cc930c944e62d72fbf69789f2516ea895efdf18db","source_id":"us-cfr","stale":true,"prev":"us/28-cfr-202.248","next":"us/28-cfr-202.250"},"notice":"GroundRules: Original legal text. Not legal advice."}