3 ms·
I can't read TFA because it's paywalled, so I don't know if it talks about the information saved, but they don't need your home address, ID number and issuer is
by astura 7y ago
I can't read TFA because it's paywalled, so I don't know if it talks about the information saved, but they don't need your home address, ID number and issuer is all they need to store as far as PII goes and you don't even have to store those directly - you can encrypt them like a password.
- roywiggins 7y agoYou can brute force an ID number a lot easier than a good password.
- NoInputSignal 7y agoI think OP was asking: even though there are best practices to follow when storing PII, how can we trust every private entity that stores our PII to be using those best practices?
- droithomme 7y agoThe article states that they store in their database your "name, gender, date of birth, zip code, and photo", but currently they don't store your address or id number. The information stored though is certainly sufficient to find your street address and a great deal of other information in almost all cases since a full legal name + DoB + zip code match is nearly always a unique identifier. Storing the id photo is fun and no doubt useful for further tracking of the patron using things such as the cameras on the table kiosks. Also the photo has value for sale to other interested parties.