"Pseudonymous data" means personal data that cannot be attributed to a specific individual because additional information that would allow the data to be attributed to a specific individual is:

1. (1) kept separately; and

2. (2) subject to appropriate technical and organizational measures;

   to ensure that the personal data is not attributed to an identified or identifiable individual.

As added by P.L.94-2023, SEC.1.