28 CFR § 202.206 - Bulk U.S. sensitive personal data.

---
identifier: "/us/cfr/t28/s202.206"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "28 CFR § 202.206 - Bulk U.S. sensitive personal data."
title_number: 28
title_name: "Judicial Administration"
section_number: "202.206"
section_name: "Bulk U.S. sensitive personal data."
chapter_name: "DEPARTMENT OF JUSTICE"
part_number: "202"
part_name: "ACCESS TO U.S. SENSITIVE PERSONAL DATA AND GOVERNMENT-RELATED DATA BY COUNTRIES OF CONCERN OR COVERED PERSONS"
positive_law: false
currency: "2026-04-05"
last_updated: "2026-04-05"
format_version: "1.1.0"
generator: "[email protected]"
authority: "50 U.S.C. 1701  50 U.S.C. 1601  E.O. 14117, 89 FR 15421."
regulatory_source: "90 FR 1706, Jan. 8, 2025, unless otherwise noted."
cfr_part: "202"
---


# 202.206 Bulk U.S. sensitive personal data.

The term *bulk U.S. sensitive personal data* means a collection or set of sensitive personal data relating to U.S. persons, in any format, regardless of whether the data is anonymized, pseudonymized, de-identified, or encrypted, where such data meets or exceeds the applicable threshold set forth in § 202.205.