Identification should include defining
- personally identifiable information (PII)—any information about an individual, directly or indirectly, that suggests the identity of an individual either directly (i.e., name, address, Social Security number) or indirectly (i.e., gender, race, birthdate)
- personal financial information (PFI)—any financial information a financial company shares with affiliates (i.e., part of a customer’s financial group) or non-affiliates
- non-public information (NPI)—any PFI that a financial institution collects when providing a service to a customer; does not include information that is accessible to the public
- personal health information (PHI)—any information about a person's medical history collected by medical professionals (e.g., tests, lab results, insurance information)
- digital footprint—data collected about a person based upon one’s online activity. Data can include, but is not limited to
- Internet protocol address
- tweets
- Facebook posts
- browsers
- websites visited
- digital traces—defined by content (i.e., the message) and metadata (i.e., the context of the message)
- business data
- customer data
- intellectual property
Process/Skill Questions:
- How can a digital footprint affect a person receiving a security clearance?
- How can PHI be affected if there is a cybersecurity breach?
- What is considered intellectual property?
- How can someone claim intellectual property?
- What measures can be taken to protect consumer data?
- How can a digital footprint and/or digital traces affect employment and/or college acceptance?