Difference between revisions of "Personally Identifiable Information"
(→‎National Institute of Standards and Technology (NIST))
 
(2 intermediate revisions by the same user not shown)
Line 3: Line 3:
 
==Minnesota Statute==
 
==Minnesota Statute==
  
−
An individual's first name or first initial and last name in combination with any one or more of the following data elements, when the data element is not secured by encryption or another method of technology that makes electronic data unreadable or unusable, or was secured and the encryption key, password, or other means necessary for reading or using the data was also acquired:
+
An individual's first name or first initial and last name in combination with any one or more of the following data elements...:
 
* Social Security number;
 
* Social Security number;
 
* driver's license number or Minnesota identification card number; or
 
* driver's license number or Minnesota identification card number; or
Line 10: Line 10:
 
==National Institute of Standards and Technology (NIST)==
 
==National Institute of Standards and Technology (NIST)==
  
−
NIST defines PII as "any information about an individual maintained by an agency, including (1) any information that
+
NIST defines PII as "any information about an individual maintained by an agency, including (1) any information that can be used to distinguish or trace an individual‘s identity, such as name, social security number, date and place of birth, mother‘s maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information." [http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-122.pdf Pub800-122]
−
can be used to distinguish or trace an individual‘s identity, such as name, social security number, date and
 
−
place of birth, mother‘s maiden name, or biometric records; and (2) any other information that is linked or
 
−
linkable to an individual, such as medical, educational, financial, and employment information." [http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-122.pdf Pub800-122]
 
−
 
 
−
Examples of PII include, but are not
 
−
limited to:
 
−
* Name, such as full name, maiden name, mother’s maiden name, or alias;
 
−
* Personal identification number, such as social security number (SSN), passport number, driver’s license number, taxpayer identification number, or financial account or credit card number;
 
−
* Address information, such as street address or email address;
 
−
* Personal characteristics, including photographic image, especially a face image or other identifying characteristic; fingerprints; handwriting; or other biometric data, such as retina scan, voice signature, and facial geometry; and
 
−
* Information about an individual that is linked or linkable to one of the above categories, such as date of birth, place of birth, race, religion, weight, activities, geographical indicators, employment information, medical, information, education, information, and financial information.
 

Latest revision as of 21:15, 24 January 2017

Personally identifiable information (PII) - information that can be used on its own or with linked information to identify a person. The Office of Management and Budget defines it as the "information about a person that contains some unique identifier, including but not limited to name or Social Security Number, from which the identity of the person can be determined." - Office of Management and Budget (OMB Memorandum M-07-16).

Minnesota Statute

An individual's first name or first initial and last name in combination with any one or more of the following data elements...:

  • Social Security number;
  • driver's license number or Minnesota identification card number; or
  • account number or credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual's financial account.

National Institute of Standards and Technology (NIST)

NIST defines PII as "any information about an individual maintained by an agency, including (1) any information that can be used to distinguish or trace an individual‘s identity, such as name, social security number, date and place of birth, mother‘s maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information."

Retrieved from "/gts/w/index.php?title=Personally_Identifiable_Information&oldid=33251"