Personally Identifiable Information (PII)
What is Personally Identifiable Information (PII)?
Personally Identifiable Information, or PII, is information that can identify a specific person either on its own or when combined with other data.
Examples
- A customer record containing a full name, home address, date of birth, and phone number contains PII.
- An employee spreadsheet listing national insurance numbers, email addresses, and payroll details contains PII.
Discover 🔎
Organizations collect personal information constantly. It appears in account registrations, HR records, customer databases, help desk tickets, payment systems, marketing lists, identity checks, and countless other everyday workflows. Much of this information seems ordinary at first, but once it can be tied to a real person, it becomes far more sensitive.
That is why PII matters so much in cybersecurity and governance. When personal data is exposed, misused, or handled carelessly, the consequences can include fraud, impersonation, privacy harm, legal problems, and loss of trust. Protecting systems is important, but protecting the people represented inside those systems is just as important.
Summary 📝
Personally Identifiable Information is data that can identify a specific person on its own or when combined with other details. It matters because exposed or mishandled PII can lead to fraud, privacy harm, reputational damage, and compliance problems. Strong protection depends on understanding where PII exists, limiting access to it, securing it in storage and transit, and avoiding unnecessary collection or retention.
Tip: The interactive version includes progress tracking, decks, and premium deep dives.