4 CCR 723-4 Rule 4033
Requests for Aggregated Data Reports from a Utility
(a)A utility shall not disclose aggregated data unless the recipient is authorized to receive all customer data within the aggregated data, and the disclosure otherwise conforms to this rule and rules 4031, 4034, and 4035. In aggregating customer data to create an aggregated data report, a utility must ensure that the data do not include any personal information or a unique identifier.#
(b)At a minimum, a particular aggregation must contain at least fifteen customers; and, within any customer class no single customer's customer data or premise associated with a single customer's customer data may comprise 15 percent or more of the total customer data aggregated per customer class to generate the aggregated data report (the "15/15 Rule").#
(c)If an aggregated data report cannot be generated in compliance with paragraph 4033(b), the utility shall notify the requestor that the aggregated data, as requested, cannot be disclosed and identify the reason(s) the request was denied. The requestor shall be given an opportunity to revise its aggregated data request in order to address the identified reason(s). An aggregated data request may be revised by expanding the number of customers or premise accounts in the request, expanding the geographic area included in the request, combining different customer classes or rate categories, or other applicable means of aggregating.#
(d)A utility shall include in its tariffs a description of standard and non-standard aggregated data reports available from the utility to any requestor. At a minimum, the utility's tariff shall provide the following:#
(I)a description of standard and non-standard aggregated data reports available from the utility including all available selection parameters (customer data or other data);#
(II)the frequency of data collection (annual, monthly, daily, etc.);#
(III)the method of transmittal available (electronic, paper, etc.) and the security protections or requirements for such transmittal;#
(IV)the charge for providing a standard aggregated data report or the hourly charge for compiling a non-standard aggregated data report;#
(V)the timeframe for processing requests; and#
(VI)a request form for submitting a data request for aggregated data reports to the utility identifying any information necessary from the requestor in order for the utility to process the request.#
(e)If a utility is unable to fulfill a non-standard aggregated data report request because it does not have and/or does not elect to or cannot obtain all of the data the requestor wishes to include in the aggregated data report, then the utility may contract with a contracted agent to include the additional data and process it along with the customer data in the utility's possession, to generate a non- standard aggregated data report.#
(f)A utility and each of its directors, officers and employees that discloses aggregated data as provided in these data privacy rules shall not be liable or responsible for any claims for loss or damages resulting from the utility's disclosure of aggregated data.#
(g)A utility shall not provide aggregated customer data in response to multiple overlapping requests from or on behalf of the same requestor that have the potential to identify customer data.#