|
Personally identifiable information (PII), or Sensitive Personal Information (SPI), as used in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. The abbreviation PII is widely accepted in the US context, but the phrase it abbreviates has four common variants based on ''personal'' / ''personally'', and ''identifiable'' / ''identifying''. Not all are equivalent, and for legal purposes the effective definitions vary depending on the jurisdiction and the purposes for which the term is being used. (In other countries with privacy protection laws derived from the OECD privacy principles, the term used is more often "personal information", which may be somewhat broader: in Australia's ''Privacy Act ''1988 (Cth) "personal information" also includes information from which the person's identity is "reasonably ascertainable", potentially covering some information not covered by PII.) (NIST Special Publication 800-122 ) defines PII as "any information about an individual maintained by an agency, including (1) any information that can be used to distinguish or trace an individual‘s identity, such as name, social security number, date and place of birth, mother‘s maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information." So, for example, a user's IP address as used in a communication exchange is classed as PII regardless of whether it may or may not on its own be able to uniquely identify a person. Although the concept of PII is old, it has become much more important as information technology and the Internet have made it easier to collect PII through breaches of Internet security, network security and web browser security, leading to a profitable market in collecting and reselling PII. PII can also be exploited by criminals to stalk or steal the identity of a person, or to aid in the planning of criminal acts. As a response to these threats, many website privacy policies specifically address the gathering of PII, and lawmakers have enacted a series of legislations to limit the distribution and accessibility of PII. However, PII is a legal concept, not a technical concept. Because of the versatility and power of modern re-identification algorithms, the absence of PII data does not mean that the remaining data does not identify individuals. While some attributes may be uniquely identifying on their own, any attribute can be identifying in combination with others.〔 (【引用サイトリンク】 title = Broken Promises of Privacy: Responding to the Surprising Failure of Anonymization )〕 These attributes have been referred to as quasi-identifiers or pseudo-identifiers.〔 〕 〔 ( Opinion 05/2014 on Anonymisation Techniques ) Article 29 Data Protection Working Party〕 == Examples == The following data, often used for the express purpose of distinguishing individual identity, clearly classify as PII under the definition used by the National Institute of Standards and Technology (described in detail below):〔(【引用サイトリンク】 title=Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) )〕 * Full name (if not common) * Home address * Email address (if private from an association/club membership, etc.) * National identification number * Passport number * IP address (in some cases) * Vehicle registration plate number * Driver's license number * Face, fingerprints, or handwriting * Credit card numbers * Digital identity * Date of birth * Birthplace * Genetic information * Telephone number * Login name, screen name, nickname, or handle The following are less often used to distinguish individual identity, because they are traits shared by many people. However, they are potentially PII, because they may be combined with other personal information to identify an individual. * First or last name, if common * Country, state, postcode or city of residence * Age, especially if non-specific * Gender or race * Name of the school they attend or workplace * Grades, salary, or job position * Criminal record * Web cookie When a person wishes to remain anonymous, descriptions of them will often employ several of the above, such as "a 34-year-old white male who works at Target". Note that information can still be ''private'', in the sense that a person may not wish for it to become publicly known, without being personally identifiable. Moreover, sometimes multiple pieces of information, none sufficient by itself to uniquely identify an individual, may uniquely identify a person when combined; this is one reason that multiple pieces of evidence are usually presented at criminal trials. It has been shown that, in 1990, 87% of the population of the United States could be uniquely identified by gender, ZIP code, and full date of birth.〔(【引用サイトリンク】 title=Comments of Latanya Sweeney, Ph.D. on "Standards of Privacy of Individually Identifiable Health Information" )〕 In hacker and Internet slang, the practice of finding and releasing such information is called "doxing". It is sometimes used to deter collaboration with law enforcement. On occasion, the doxing can trigger an arrest, particularly if law enforcement agencies suspect that the "doxed" individual may panic and disappear. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Personally identifiable information」の詳細全文を読む スポンサード リンク
|