Sensitive Information
What is Sensitive Information?
Information that, if disclosed improperly, could cause harm to individuals or the organization, requiring enhanced protection measures.
Terms that appear alongside sensitive information
Each of these is named in at least one of the same controls as sensitive information. The number is how many controls name both.
- consent 6 shared controls
- data subject 4 shared controls
- governance 4 shared controls
- authentication 4 shared controls
- confidentiality 4 shared controls
- data subject rights 3 shared controls
- integrity 3 shared controls
- owasp 3 shared controls
Frameworks that govern sensitive information
What the standards actually require on sensitive information
Requirements naming sensitive information across 6 standards, quoted from the control text.
A controller of a database not subject to registration that holds information of special sensitivity on more than 100,000 persons must notify the Authority within 30 days of the controller's identity and contact details, the DPO's details where one is required...
israel-protection-of-privacy-law-5741-1981::8A(b) · Section 8A(b): notify the Authority of databases with sensitive information on more than 100,000 persons →Article 23: information on ideology or beliefs, trade union or party membership, political views, health and sex life, and other decree-listed information seriously affecting privacy, may be processed only with consent separate from other consents (after the r...
south-korea-pipa::23 · Process sensitive information only with separate consent or legal basis, with safeguards and exposure warnings →Identify the information and servers that are most sensitive to the entity and maintain an up to date diagram of the network showing them.
ANSSI-HYG-04 · Identify the Most Sensitive Information and Servers and Maintain a Network Diagram →A participant holding non-public, price-sensitive information through a client relationship must not advise another client in a way that would damage either client's interests, unless effective information barriers separate the business areas and the adviser d...
asic-market-integrity-rules-securities-markets-2017-australia::3.6 · Do not give advice that damages clients when holding non-public price-sensitive information; maintain information barriers →An unlisted disclosing entity, or a listed one whose market has no continuous disclosure rule, lodges with ASIC as soon as practicable a document containing information it becomes aware of that is not generally available and that a reasonable person would expe...
australia-corporations-act-2001-cth::s675-675A · ss 675 and 675A Other disclosing entities: lodge price-sensitive information with ASIC as soon as practicable →Implement procedures, such as non-disclosure agreements, to protect sensitive or confidential information given to the reviewer and to protect or exempt information developed under the standard from public disclosure.
nerc-cip::CIP-014 R6.4 · CIP-014-3 R6.4: Protect sensitive information shared with the reviewer →Questions people ask about sensitive information
What is Sensitive Information?
Why is Sensitive Information important for compliance?
Which compliance frameworks address Sensitive Information?
Where can I learn more about Sensitive Information?
See how Sensitive Information applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.