{"operation":"document","citation":"4 CCR 723-4 Rule 4033","title":"Requests for Aggregated Data Reports from a Utility","source_type":"regulation","agency":"Colorado Public Utilities Commission","status":"current","official":true,"published_on":null,"effective_on":null,"summary":"(a) A utility shall not disclose aggregated data unless the recipient is authorized to receive all customer data within the aggregated data, and the disclosure otherwise conforms to this rule and rules 4031, 4034, and 4035. In aggregating customer data to create an aggregated data report, a utility ","machine_formats":{"json":"https://regulus.evalyn.ai/document/co-ccr-4-723-4-4033.json","markdown":"https://regulus.evalyn.ai/document/co-ccr-4-723-4-4033.md"},"app_url":"https://regulus.evalyn.ai/document/co-ccr-4-723-4-4033","source_url":"https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4","body":"(a) A utility shall not disclose aggregated data unless the recipient is authorized to\nreceive all customer data within the aggregated data, and the disclosure\notherwise conforms to this rule and rules 4031, 4034, and 4035. In aggregating\ncustomer data to create an aggregated data report, a utility must ensure that the\ndata do not include any personal information or a unique identifier.\n(b) At a minimum, a particular aggregation must contain at least fifteen customers;\nand, within any customer class no single customer’s customer data or premise\nassociated with a single customer’s customer data may comprise 15 percent or\nmore of the total customer data aggregated per customer class to generate the\naggregated data report (the “15/15 Rule”).\n\n(c) If an aggregated data report cannot be generated in compliance with paragraph\n4033(b), the utility shall notify the requestor that the aggregated data, as\nrequested, cannot be disclosed and identify the reason(s) the request was\ndenied. The requestor shall be given an opportunity to revise its aggregated data\nrequest in order to address the identified reason(s). An aggregated data request\nmay be revised by expanding the number of customers or premise accounts in\nthe request, expanding the geographic area included in the request, combining\ndifferent customer classes or rate categories, or other applicable means of\naggregating.\n(d) A utility shall include in its tariffs a description of standard and non-standard\naggregated data reports available from the utility to any requestor. At a minimum,\nthe utility’s tariff shall provide the following:\n(I) a description of standard and non-standard aggregated data reports\navailable from the utility including all available selection parameters\n(customer data or other data);\n(II) the frequency of data collection (annual, monthly, daily, etc.);\n(III) the method of transmittal available (electronic, paper, etc.) and the\nsecurity protections or requirements for such transmittal;\n(IV) the charge for providing a standard aggregated data report or the hourly\ncharge for compiling a non-standard aggregated data report;\n(V) the timeframe for processing requests; and\n(VI) a request form for submitting a data request for aggregated data reports to\nthe utility identifying any information necessary from the requestor in order\nfor the utility to process the request.\n(e) If a utility is unable to fulfill a non-standard aggregated data report request\nbecause it does not have and/or does not elect to or cannot obtain all of the data\nthe requestor wishes to include in the aggregated data report, then the utility may\ncontract with a contracted agent to include the additional data and process it\nalong with the customer data in the utility’s possession, to generate a non-\nstandard aggregated data report.\n(f) A utility and each of its directors, officers and employees that discloses\naggregated data as provided in these data privacy rules shall not be liable or\nresponsible for any claims for loss or damages resulting from the utility’s\ndisclosure of aggregated data.\n(g) A utility shall not provide aggregated customer data in response to multiple\noverlapping requests from or on behalf of the same requestor that have the\npotential to identify customer data.","truncated":false,"body_characters":3267}