3 ms·

Would such a list not by nature consist of PII?

• icedchai 8y ago
  Not necessarily. It might consist of user IDs (integers, UUIDs) or hashed values of something that can be mapped to the user...
  • badwolf 8y ago
    User ID's are considered PII though. If it can be mapped to the user, it's by definition identifying information
    • icedchai 8y ago
      Identifiers that have no meaning outside of your system are not PII.
      • Boulth 8y ago
        Reading https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-personal-data_en https://ec.europa.eu/info/law/law-topic/data-protection/refo... I would agree, of course if that identifier is not in some other database, that maps it to a person. If you have just ids in a backup and you remove the person-ID mapping this should be fine.