Learn how to identify, classify and protect institutional Data

Personally Identifiable Information (PII) is defined as any information that permits the identity of an individual to be directly or indirectly inferred, including any information which is linked or linkable to that individual regardless of whether the individual is a U.S. citizen, lawful permanent resident, visitor to the United States of America

Not all PII is sensitive, e.g. PII on a business card. Sensitive Personally Identifiable Information (Sensitive PII) includes such information such as a Social Security number or alien number (A-number), and requires stricter handling guidelines because of the increased risk to an individual if compromised. The table below helps to better determine what Sensitive PII is:

PII Includes Name, e-mail, home address etc., Sensitive PII includes:
IF STAND-alone If paired with another identifier
Social Security Number (SSN) Citizenship or Immigration Status
Driver's License or State ID# Medical Information
Passport Number Ethnic or Religious Affiliation
Alien Registration Number (A#) Sexual Orientation
Financial Account Number Account Passwords
Credit Card Numbers Last Four Digits of SSN
Biometric Identifiers Date of Birth
  Criminal History
  Mother's Maiden Name
  Personal Health Information

Updated 11/11/2022