Personally Identifiable Information
What is Personally Identifiable Information?
Any information that can be used to identify, contact, or locate a specific individual, either alone or when combined with other data.
Terms that appear alongside personally identifiable information
Each of these is named in at least one of the same controls as personally identifiable information. The number is how many controls name both.
- transparency 6 shared controls
- policy 5 shared controls
- confidentiality 5 shared controls
- information security 5 shared controls
- management system 4 shared controls
- iec 27001 4 shared controls
- consent 3 shared controls
- nist 3 shared controls
Frameworks that govern personally identifiable information
What the standards actually require on personally identifiable information
Requirements naming personally identifiable information across 6 standards, quoted from the control text.
Specific Categories of Personally Identifiable Information. Apply [organization-defined] for specific categories of personally identifiable information
NIST800-PT-7 · Specific Categories of Personally Identifiable Information. Apply [organization-defined] for specific categories of personally identifiable information →Prevents real personal data being handed to suppliers and developers for testing, training or research.
161R1-PM-25 · Minimization of Personally Identifiable Information Used in Testing, Training, and Research →Top management must demonstrate the leadership and commitment ISO/IEC 27001 requires, with every reference to information security read as covering privacy risk arising from the processing of personally identifiable information.
iso-27701-2019::5.3.1 · Leadership and commitment →An operator that collects personally identifiable information about Delaware residents through a commercial internet service must make its privacy policy conspicuously available (e.g., via a link containing the word privacy on the homepage or first significant...
DE-DOPPA-1205C-POST · Conspicuous posting of a privacy policy →Describes how actors interact in the processing of personally identifiable information
29100-4.2 · Interactions between actors →34 CFR 99.1 applicability + 99.3 definitions. APPLICABILITY: FERPA applies to any educational agency or institution receiving funds from any program administered by the Secretary of Education (including all US K-12 + nearly all postsecondary institutions accep...
FERPA-Part99.1_3 · Applicability and Definitions (34 CFR 99.1, 99.3) →Questions people ask about personally identifiable information
What is Personally Identifiable Information?
Why is Personally Identifiable Information important for compliance?
Which compliance frameworks address Personally Identifiable Information?
Where can I learn more about Personally Identifiable Information?
See how Personally Identifiable Information applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.