3 ms·
Not all PII is inherently "sensitive" though. Meaning not everything that can be used to actually identify you needs to be encrypted and protected. I don't know
by mattdodge 9y ago
Not all PII is inherently "sensitive" though. Meaning not everything that can be used to actually identify you needs to be encrypted and protected. I don't know for sure but I don't think names or addresses qualify as that.
- morogop 9y agoNames and addresses are both personal data under almost all regulatory regimes. A reasonable rule of thumb is that if you _could_ use the data to identify a person or a household, then it's personal data, whether or not you do so.
- zephyrus1985 9y agovarious state by state. The above does qualify as PII in california
- s73ver_ 9y agoI absolutely would say it would, especially where there's a very good chance that the home and work addresses are part of that list, and the idea that someone would use a database like that to spy on an ex and harass and/or assault them is an actual thing that happens.