2 ms·

PII doesn’t exist in GDPR so certainly don’t start there. “Personal data” is the nearest equivalent, but that includes any data that could be aggregated to iden

• mhoad 4y ago
  You are certainly correct that the term PII never appears in the legislation but instead the focus is on the ability to identify someone. What I’m saying is that by isolating PII as much as possible you can make that larger task much easier to achieve. You can actually learn a lot from places you might not think of at first like how intel agencies and LE do things like source protection where you have to deal with the concept of a particular identity in a lot of different scenarios and different groups but it’s essential that the person remain unidentifiable at the same time to almost everyone. It’s a very similar set of problems and they have been thinking about this for a long time already.