Forums › Ask CIMA Tutor Forums › Ask CIMA P3 Tutor Forums › GDPR and Personal Identification Information
- This topic has 3 replies, 2 voices, and was last updated 3 years ago by Ken Garrett.
- AuthorPosts
- April 19, 2021 at 4:59 pm #618232
I have a few questions on what consists of PII. I know some are classified as linked and some as linkable, but if a question comes up as “what consists of PII”, would they both be correct?
I have a list that I would like to know if they would be classified as PII or not under CIMA:
1. IP Address
2. Cookies
3. Telephone numbers (including old phone numbers?)
4. First pet’s name
5. Mother’s maiden name
6. Husband/Kids name’s
7. Sport affiliation
8. Position in a Company/Charity/Association
9. First car model
10. Old addressApril 19, 2021 at 6:40 pm #618241I’m not a legal expert, but I think that the principle is that the data must identify an individual.
IP address doesn’t because it just identifies a machine, often temporarily (dynamic).
Similarly 2,4,5,6,7,9,10.
Current telephone number might (for a mobile registered to a specific user)
Position in a company probably does, if the information is up-to-date.
Old address – probably not as there might be many people who lived there.April 20, 2021 at 4:54 pm #618316For 4,5,6,9 – these are commonly used as security questions when you forget your password. So wanted to understand if they would be classified as PII, as the information on conjunction with other information could identify an individual?
April 20, 2021 at 5:54 pm #618323They are not PII. There is no way you can go from a pet called Fido to the person nor a supporter of MUFC to a person. It’s rather like asking someone to enter a 4 digit PIN – many people could have the same, probably 1234!
- AuthorPosts
- You must be logged in to reply to this topic.