Types_of_Data
Types_of_Data
Privacy Considerations:
• PII requires strict protection to prevent identity theft and fraud.
• Organisations must ensure that PII is collected, stored, and processed
securely.
• Regulations such as GDPR and CCPA provide specific guidelines for
handling PII.
• Aggregated data
• Anonymized data
• Statistical data
Privacy Considerations:
• Although non-PII is generally less sensitive, improper handling or re-
identification risks can still pose privacy concerns.
1|Page
• Organisations should implement techniques like anonymization and
data masking to reduce privacy risks.
• Non-PII should be used responsibly to avoid any unintended
identification of individuals.
SPD is a subset of PII that includes information that is more sensitive and
requires higher levels of protection due to the potential harm that could
result from its disclosure. This includes:
• Health information
• Financial information
• Biometric data
• Genetic data
• Sexual orientation
• Religious beliefs
• Political opinions
Privacy Considerations:
• Enhanced security measures are necessary to protect SPD.
• Access to SPD should be limited to authorised personnel only.
• Specific consent is often required from individuals before collecting or
processing SPD.
• Medical records
• Health insurance information
• Treatment details
Privacy Considerations:
• PHI is governed by regulations such as HIPAA in the United States.
• Strict guidelines dictate how PHI should be stored, transmitted, and accessed.
• Breaches of PHI can lead to severe legal and financial penalties.
2|Page
5. Confidential Business Information (CBI)
CBI, also known as trade secrets, includes information that businesses wish
to keep private to maintain a competitive edge. This includes:
• Customer lists
• Proprietary processes
• Business strategies
• Financial records
Privacy Considerations:
• CBI requires protection to safeguard the business’s competitive advantage.
• Measures such as non-disclosure agreements (NDAs) and robust
cybersecurity protocols should be in place.
• Unauthorised disclosure of CBI can lead to significant financial loss and
legal consequences.
6. Public Information
Public information is data that is lawfully available to the general public.
This includes:
• Public records
• Government reports
• Data published by individuals or organisations on public platforms
Privacy Considerations:
• While public information is accessible to anyone, organisations should
still respect privacy norms and ethical considerations when using or
sharing public data.
• Misuse of public information can still lead to reputational damage or
legal issues.
3|Page