These are the starting point for my recommendation for PII data elements for CCC based on the NIST recommended PII data elements (Alex Jackl):
| Element | NIST Level | Obfuscated? | Encrypted? | Aggregate Only? | Notes |
|---|---|---|---|---|---|
Full name (if not common) | 1 | Y | N | N | |
Face (photograph) | 1 | Y | N | N | |
Home address | 1 | Y | N | N | |
Email address | 1 | Y | N | N | |
National identification number/SSN | 1 | Y | Y | N/A | |
Passport number | 1 | Y | Y | N/A | |
Vehicle registration plate number | 1 | Y | Y | N/A | |
Driver's license number | 1 | Y | Y | N/A | |
Fingerprints | 1 | Y | Y | N/A | |
| Handwriting capture | 1 | Y | N | N/A | |
Credit card numbers | 1 | Y | Y | N/A | |
Digital identity | 1 | Y | Y | N/A | |
Date of birth | 1 | N | N | N | If linked to other Class 1 Elements this must also be obfuscated |
Birthplace | 1 | N | N | N | If linked to other Class 1 Elements this must also be obfuscated |
Genetic information | 1 | Y | Y | N/A | |
Telephone number | 1 | Y | Y | N/A | Aggregating by Area Code is acceptable |
| Login name, | 1 | Y | Y | N/A | |
| Screen name | 1 | Y | Y | N/A | |
| Nickname, or handle | 1 | Y | Y | N/A | |
Class 1 Elements: Obfuscated in open reports - except for Date of Birth as noted
Full name (if not common)
Face (photograph)
Home address
...