4 ms·

> It's an obvious question to say "Do you store personal information for more than X months? still the question is, what exactly qualifies as "personal informa

> It's an obvious question to say "Do you store personal information for more than X months? still the question is, what exactly qualifies as "personal information", many seemingly irrelevant things can be used to identify you, login ip addresses, session ids, login frequency, Its a term with holes the size of Montana. > Being "very hard to stop" isn't relevant. I will concede this point, but uncovering cooperation can be a near impossibility

jbri 15y ago
> still the question is, what exactly qualifies as "personal information", many seemingly irrelevant things can be used to identify you, login ip addresses, session ids, login frequency, Its a term with holes the size of Montana. "Personally identifiable information" is not some nebulous term that means whatever the writer wants it to mean, it has a pretty strict legal meaning. "Information which can be used to distinguish or trace an individual's identity, such as their name, social security number, biometric records, etc. alone, or when combined with other personal or identifying information which is linked or linkable to a specific individual".
- throwaway32 15y ago
  >when combined with other personal or identifying information which is linked or linkable to a specific individual Take a look into data de-anonymization techniques, this can encompass basically any stored information at all. This is not at all a clear issue. (pdf warnings) http://www.cs.utexas.edu/~shmat/shmat_oak08netflix.pdf http://www.cs.utexas.edu/~shmat/shmat_oak08netflix.pdf http://iseclab.org/papers/sonda-tr.pdf http://iseclab.org/papers/sonda-tr.pdf