4 ms·
The amount of times I've heard "Well, it's just analytics data, it's public anyways" from people just drives me up the wall. No, it's not public, it's still PII
by vorpalhex 7y ago
The amount of times I've heard "Well, it's just analytics data, it's public anyways" from people just drives me up the wall. No, it's not public, it's still PII, you still have to guard it correctly!
- naravara 7y agoIt is very hard to make people understand that scale matters when deciding how sensitive data is. They only ever care about it in whatever narrowly defined use case they're worried about. The idea that someone can take an element of not-particularly-sensitive data from you, combine it with elements of not-particularly-sensitive data from elsewhere, and end up with a database full of extremely sensitive data simply does not click.