I don't have any direct knowledge of particular data standards that were used with respect to de-identifying the mobility data in question.
If legislation is going to extend to de-identified data, which it should, it should certainly extend to addressing or identifying what standards should apply, what de-identification standards should apply—