Personally Identifiable Information (PII)

These are the starting point for Alex Jackl's recommendation for PII data elements for CCC based on the National Institute of Standards and Technology (NIST) recommended PII data elements.

Level 1 Elements are considered by NIST to be the most sensitive. NIST lists Level 2 Elements as those that must be used with caution as, when used in conjunction with other elements, may constitute a breach of privacy.

Level 3 elements are those elements that are present in CCC eco-system, yet not directly called out in the NIST standard.

A good overview of the PII element standards can be found here.

Element	NIST Level	Obfuscated?	Encrypted?	Aggregate Only?	Notes
Full name (if not common)	1	Y	N	N
Face (photograph)	1	Y	N	N/a
Home address	1	Y	N	N
Email address	1	Y	N	N
National identification number/SSN	1	Y	Y	N/A
Passport number	1	Y	Y	N/A
Vehicle registration plate number	1	Y	Y	N/A
Driver's license number	1	Y	Y	N/A
Fingerprints	1	Y	Y	N/A
Handwriting capture	1	Y	N	N/A
Credit card numbers	1	Y	Y	N/A
Digital identity	1	Y	Y	N/A
Date of birth	1	N	N	N	If linked to other Class 1 Elements this must also be obfuscated
Birthplace	1	N	N	N	If linked to other Class 1 Elements this must also be obfuscated
Genetic information	1	Y	Y	N/A
Telephone number	1	Y	Y	N/A	Aggregating by Area Code is acceptable
Login name,	1	Y	Y	N/A
Screen name	1	Y	Y	N/A
Nickname, or handle	1	Y	Y	N/A
First or last name individually, if common	2	N	N	N
Country, state, postcode or city of residence	2	N	N	N
Age	2	N	N	N
Gender	2	N	N	N
Race	2	Y	N	Y
Name of school or workplace	2	N	N	N
Grades	2	N	N	Y	Must be obfuscated if connected to Level 1 Elements in a public report
Salary	2	Y	Y	Y
Job Position	2	N	N	N
Criminal Record data	2	Y	Y	Y
Web cookie	2	Y	N	N/A
Sexual Orientation	3	Y	Y	N
CCCID	3	N	N	Y

CCCApply Elements that will be obfuscated (as of April 25,2018)

These elements were selected using the guidelines laid out by the National Center for Education Statistics and the the NIST guidelines for protecting sensitive information. Information on this can be found above.

The core criterion for inclusion was not the sensitivity of the data but rather whether inclusion of the data in the report would allow a person to be uniquely identified and thus have their privacy compromised with only minimal effort on the part of the observer.

By obfuscation we mean that the report MAY contain the column but it would have a set of symbols ( for example XXXXX) to indicate that there was data but it was INTENTIONALLY not included. This minimizes the number of followup requests from people who might think the data was "accidently" left out.

The Obfuscated element list, with much more metadata (which tables and and specific applications the data elements came from, can be found on the "Obfuscated Element" tab in the Enterprise Data Dictionary for CCCApply which can be found below. That list has duplicated because the same elements often show up in multiple tables and in multiple applications. To generate the unique list below filter on "X" in the "Unique" column.

This enterprise data dictionary for CCCApply also has six other tabs - a domain summary list for each of the three CCCApply applications and a detailed field list of each of the three applications. The Obfuscation information can also be found in the detailed field tabs in the "Obfuscate" column.

https://docs.google.com/spreadsheets/d/1JvWpS2lP6-IlAK6i-k4aj6SjuKXQ2si-YE1UeJo2KZM/edit#gid=957355365

Here, in alphabetical order, are the 107 elements from CCCApply that will be obfuscated in reports that must mask Personally Identifiable Information (PII).

agent_phone_number

alien_reg_number

cryptokey_id

current_mailing_address_non_us_postal_code

current_mailing_address_street_2

current_mailing_address_street_po_box

current_mailing_address_us_zip_code

current_mailing_non_us_postal_code

current_mailing_street_1

current_mailing_street_2

current_mailing_zip_code

current_residence_postal_code

current_residence_street

current_residence_street2

current_residence_zip_code

daytime_phone

dep1_first_name

dep1_last_name

dep10_first_name

dep10_last_name

dep2_dependent_id

dep2_first_name

dep2_last_name

dep3_dependent_id

dep3_first_name

dep3_last_name

dep4_first_name

dep4_last_name

dep5_first_name

dep5_last_name

dep6_first_name

dep6_last_name

dep7_first_name

dep7_last_name

dep8_first_name

dep8_last_name

dep9_first_name

dep9_last_name

email

emergency_contact_first_name

emergency_contact_intl_phone

emergency_contact_last_name

emergency_contact_non_us_postal_code

emergency_contact_street_1

emergency_contact_street_2

emergency_contact_zip_code

evening_phone

firstname

i94_admission_number

ip_address

lastname

mailaddr_nonusstate

mailing_address_city

mailing_address_street

mailing_address_street2

mailing_address_zipcode

mainphone

mainphoneintl

middlename

non_us_permanent_home_non_us_postal_code

non_us_permanent_home_street_1

non_us_permanent_home_street_2

non_us_postal_code

otherfirstname

otherlastname

othermiddlename

parent_guardian_first_name

parent_guardian_last_name

parent_guardian_non_us_postal_code

parent_guardian_street_1

parent_guardian_street_2

parent_guardian_zip_code

passport_number

perm_addr_intl_code

perm_addr_non_us_postal_code

perm_addr_street_1

perm_addr_street_2

perm_addr_zip_code

perm_zip4

permanent_address_country

postalcode

preferred_firstname

preferred_lastname

preferred_middlename

preferred_name

previous_name_first

previous_name-last

secondphone

secondphoneintl

sevis_id_number

signature

ssn

ssn_last4

streetaddress1

streetaddress2

student_name_first

student_name_last

student_name_middle

supp_phonenumber_01

supp_phonenumber_02

supp_phonenumber_03

supp_phonenumber_04

supp_phonenumber_05

visanumber

zip_code

zip4

Data Management

Personally Identifiable Information (PII)

Analytics

CCCApply Elements that will be obfuscated (as of April 25,2018)

Related content