Skip to end of metadata
Go to start of metadata

You are viewing an old version of this content. View the current version.

Compare with Current View Version History

« Previous Version 6 Next »

These are the starting point for ALex Jackl's recommendation for PII data elements for CCC based on the NIST recommended PII data elements.
Level 1 Elements are considered by NIST to be the most sensitive.   NIST lists Level 2 Elements as those that must be used with caution as, when used in conjunction with other elements, may constitute a breach of privacy. 
Level 3 elements are those elements that are present in CCC eco-system, yet not directly called out in the NIST standard. 
A good overview of the PII element standards can be found here.
ElementNIST LevelObfuscated?Encrypted? Aggregate Only?Notes

Full name (if not common)

1YNN
Face (photograph)
1YNN/a
Home address
1YNN
Email address 
1YNN
National identification number/SSN
1YYN/A
Passport number
1YYN/A
Vehicle registration plate number
1YYN/A
Driver's license number
1YYN/A
Fingerprints
1YYN/A
Handwriting capture1YNN/A
Credit card numbers
1YYN/A
Digital identity
1YYN/A
Date of birth 
1NNNIf linked to other Class 1 Elements  this must also be obfuscated
Birthplace
1NNNIf linked to other Class 1 Elements this must also be obfuscated
Genetic information
1YYN/A
Telephone number
1YYN/AAggregating by Area Code is acceptable
Login name, 1YYN/A
Screen name1YYN/A
Nickname, or handle1YYN/A 
First or last name individually, if common2NNN
Country, state, postcode or city of residence2NNN
Age2NNN
Gender2NNN
Race 2YNY
Name of school or workplace2NNN
Grades2NNYMust be obfuscated if connected to Level 1 Elements in a public report
Salary2YYY
Job Position2NNN
Criminal Record data2YYY
Web cookie2YNN/A
Sexual Orientation3YYN
CCCID3NNY






  
  • No labels