Personally Identifiable Information (PII)
Table of contents
Article 28Article 30Article 32Article 6 Article 9Authorized AgentsCalifornia Consumer Privacy Act (CCPA)California Privacy Protection Agency (CPPA)California Privacy Rights Act (CPRA)Colorado Privacy Act (CPA)Consent Dark PatternsData ControllerData MappingData ProcessorData SubjectData Subject Access RequestDo Not TrackDo not sell/Do not share Facebook Limited Data Use (LDU)GDPR Personal DataGDPR PrinciplesGDPR RightsGeneral Data Protection Regulation (GDPR)Global Privacy Control (GPC)Gramm-Leach-Bliley ActHIPAALGDP (Brazil's Privacy Law)PseudonymizationRecord of Processing Activities (ROPA)Schrems IITracking CookiesUtah Consumer Privacy Act (UCPA)Verifiable Consumer Request (VCR)Virginia Consumer Data Protection Act (VCDPA)
Personally identifiable information (PII) is any data that could potentially identify a specific individual. Data that can be used to distinguish one person from another or can be used for de-anonymizing anonymous data is also considered PII.
A person's name combined with other specific data (such as a Social Security number, driver's license number, account name, telephone number, or email address) is always considered PII. Other forms of PII may include:
- Bank account number
- Credit card number
- Date of birth
- Fingerprints
- Health records (including medical history, mental health records, insurance claims, and test results)
Increasingly, the combination of two or more pieces of non-PII information may also be considered PII. For example, a username together with a password could be classified as PII.