3 ms·
They "just" have a profile of "a person" that happens to match you to the last tiny detail. They don't put your name as a label onto that data, so it's "not" id
by black_puppydog 8y ago
They "just" have a profile of "a person" that happens to match you to the last tiny detail. They don't put your name as a label onto that data, so it's "not" identifiable. Makes no difference for marketing purposes if they don't want to address you by name. But yeah, once linked to your name by one of those manymany data points they collected, it is very personal....
- organsnyder 8y agoThat would be considered PII at the healthcare organization I work for.
- mattnewton 8y agoBecause the people who work in the heath industry understand all usually all it takes is a name and some tiny fact like your adresss to unmask the dataset after the fact.
- reaperducer 8y agoBecause the health care industry has enough money to hire the best lawyers to advise on this sort of thing.
- tjoff 8y agoIt really is common sense though. You only need good lawyers if you are trying to game it.
- mattnewton 8y agoI don’t think it’s about availability of money, companies don’t spend money they don’t have to. INAL but I believe it’s about HIPAA and related legislation making it their liability.
- sdoering 8y agoRegarding the GDPR this is PII. They can squeel and wiggle. But as the use a thing called the internet to transfer this data, they receive something like an IP address. And that is PII. It wouldn't be a problem to collect that. If I am informed as well as have the (easy) ability to opt out. Did they collect after 25. of May? Wouldn't they be liable regarding GDPR?
- jdietrich 8y agoThe GDPR uses the term "personal data" rather than PII. Any data can become personal data if it could be related to an individual by any practical means. Whether or not you collect my name, address or social security number is largely immaterial - if you can figure out who I am based on the data you collect, then it's personal data.