4 Colo. Code Regs. § 723-3-3033
Current through Register Vol. 47, No. 11, June 10, 2024
Section 4 CCR 723-3-3033 - Requests for Aggregated Data Reports from a Utility(a) A utility shall not disclose aggregated data unless the recipient is authorized to receive all customer data within the aggregated data, that the disclosure otherwise conforms to this rule and rules 3031, 3034, and 3035. In aggregating customer data to create an aggregated data report, a utility must ensure the data does not include any personal information or a unique identifier.(b) At a minimum, a particular aggregation must contain at least fifteen customers; and, within any customer class no single customer's customer data or premise associated with a single customer's customer data may comprise 15 percent or more of the total customer data aggregated per customer class to generate the aggregated data report (the "15/15 Rule").(c) If an aggregated data report cannot be generated in compliance with paragraph 3033(b), the utility shall notify the requestor that the aggregated data, as requested, cannot be disclosed and identify the reason(s) the request was denied. The requestor shall be given an opportunity to revise its aggregated data request in order to address the identified reason(s). An aggregated data request may be revised by expanding the number of customers or premise accounts in the request, expanding the geographic area included in the request, combining different customer classes or rate categories, or other applicable means of aggregating.(d) A utility shall include in its tariffs a description of standard and non-standard aggregated data reports available from the utility to any requestor. At a minimum, the utility's tariff shall provide the following: (I) a description of standard and non-standard aggregated data reports available from the utility including all available selection parameters (customer data or other data);(II) the frequency of data collection (annual, monthly, daily, etc.);(III) the method of transmittal available (electronic, paper, etc.) and the security protections or requirements for such transmittal;(IV) the charge for providing a standard aggregated data report or the hourly charge for compiling a non-standard aggregated data report;(V) the timeframe for processing requests; and(VI) a request form for submitting a data request for aggregated data reports to the utility identifying any information necessary from the requestor in order for the utility to process the request.(e) If a utility is unable to fulfill a non-standard aggregated data report request because it does not have and/or does not elect to or cannot obtain all of the data the requestor wishes to include in the aggregated data report, then the utility may contract with a contracted agent to include the additional data and process it along with the customer data in the utility's possession, to generate a non-standard aggregated data report.(f) A utility and each of its directors, officers and employees that discloses aggregated data as provided in these data privacy rules shall not be liable or responsible for any claims for loss or damages resulting from the utility's disclosure of aggregated data.(g) A utility shall not provide aggregated customer data in response to multiple overlapping requests from or on behalf of the same requestor that have the potential to identify customer data.38 CR 17, September 10, 2015, effective 9/30/201539 CR 06, March 25, 2016, effective 4/14/201639 CR 08, April 25, 2016, effective 5/15/201640 CR 22, November 25, 2017, effective 12/15/201742 CR 03, February 10, 2019, effective 3/2/201942 CR 07, April 10, 2019, effective 4/30/201942 CR 09, May 10, 2019, effective 5/30/201943 CR 08, April 25, 2020, effective 5/15/202043 CR 12, June 25, 2020, effective 7/15/202043 CR 20, October 25, 2020, effective 11/14/202044 CR 13, July 10, 2021, effective 7/30/202144 CR 24, December 25, 2021, effective 1/14/202245 CR 18, September 25, 2022, effective 10/15/202246 CR 02, January 25, 2023, effective 2/14/2023