SP 800-122. Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)
By E. McCallister, Tim Grance, Karen Scarfone. 2010
304 citations recorded by the source corpus.
The purpose of this document is to assist Federal agencies in protecting the confidentiality of personally identifiable information (PII) in information systems. The document explains the importance of protecting the confidentiality of PII in the context of information security and explains its relationship to privacy using the the Fair Information Practices, which are the principles underlying most privacy laws and privacy best practices. PII should be protected from inappropriate access, use, and disclosure. This document provides practical, context-based guidance for identifying PII and determining what level of protection is appropriate for each instance of PII. The document also suggests safeguards that may offer appropriate levels of protection for PII and provides recommendations for developing response plans for incidents involving PII. Organizations are encouraged to tailor the recommendations to meet their specific requirements.
Subfields: Public Health, Environmental and Occupational Health, Sociology and Political Science
View Paper: https://www.semanticscholar.org/paper/56ef00af3363c0c1fe4dadc2615e01a1bd975f2b
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Sociology and Political Science
- Alice E. Marwick
- D. boyd
- Nicole B. Ellison
- Taina Bucher
- Charles W. Steinfield
- Alessandro Acquisti
- Ralph Gross
- Cliff Lampe
Citations in the corpus
- Networked privacy: How teenagers negotiate context in social media (2014, background): “This includes “any information that can be used to distinguish or trace an individual’s identity, such as name, social security number, date and place of birth, mother’s maiden name, or biometric records” (McCallister et al., 2010).”
- Targeted Online Password Guessing: An Underestimated Threat (2016, background): “This term is sometimes used inter-changeably with the term “personally identifiable info” [10, 20], while sometimes their definitions vary greatly in different situations, laws, regulations [23, 29].”