Personally Identifiable Information
What is Personally Identifiable Information?
Any information that can be used to identify, contact, or locate a specific individual, either alone or when combined with other data.
Terms that appear alongside personally identifiable information
Each of these is named in at least one of the same controls as personally identifiable information. The number is how many controls name both.
- transparency 6 shared controls
- policy 5 shared controls
- confidentiality 5 shared controls
- information security 5 shared controls
- management system 4 shared controls
- iec 27001 4 shared controls
- consent 3 shared controls
- nist 3 shared controls
Frameworks that govern personally identifiable information
What the standards actually require on personally identifiable information
Requirements naming personally identifiable information across 6 standards, quoted from the control text.
Correct or delete personally identifiable information upon request by individuals or their designated representatives.
NIST800-SI-18(4) · SI-18(4) Personally Identifiable Information Quality Operations | Individual Requests →Limit the personally identifiable information processed through the information life cycle to the minimum needed for the purpose of collection (section 4.3).
fbi-cjis-security-policy::SI-12(1) · SI-12(1) Information Management and Retention | Limit Personally Identifiable Information Elements →Prevents real personal data being handed to suppliers and developers for testing, training or research.
161R1-PM-25 · Minimization of Personally Identifiable Information Used in Testing, Training, and Research →Where legislation and regulation apply, the organization ensures personal data (PII) is protected and privacy respected as they require.
iso-27001-2013::A.18.1.4 · Privacy and protection of personally identifiable information →Discloses how the device, and processing on it, treats PII: whether it can display, transmit, store or modify PII such as ePHI, listing the elements it can hold (patient name, ID, social security number, biometrics) (MPII-1);
mds2-medical-device::MPII · MPII Management of personally identifiable information: disclose what PII the device holds and every path by which it moves →Documented policies and procedures protect patrons' personally identifiable information, naming the responsible employee, and cover: management officials responsible for design, implementation and evaluation;
nevada-gaming-control-board-cybersecurity-requirements::MICS-IT-53 · IT MICS #53 Patron personally identifiable information protection procedures →Questions people ask about personally identifiable information
What is Personally Identifiable Information?
Why is Personally Identifiable Information important for compliance?
Which compliance frameworks address Personally Identifiable Information?
Where can I learn more about Personally Identifiable Information?
See how Personally Identifiable Information applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.