From the course: CIPP/US Cert Prep: 1 U.S. Privacy Environment
Unlock the full course today
Join today to access over 22,500 courses taught by industry experts or purchase this course individually.
Data inventory
From the course: CIPP/US Cert Prep: 1 U.S. Privacy Environment
Data inventory
- [Instructor] One of the first tasks that you should undertake as part of your privacy program is developing an inventory of all xx types of information that your organization handles, that might be affected by privacy rules. A good rule of thumb is that you should include any information in your inventory that might be considered Personally Identifiable Information or PII. The specific definition of PII that you use may vary based upon your organization's privacy policy and the regulations that apply to you, but the U.S. government's definition is a good working start, it has two elements. Under that definition, PII includes any information that can be used to distinguish an individual's identity. This includes their name, social security number, a medical record's number, their date and place of birth, their mother's maiden name, biometric records or anything else that uniquely identifies a person. PII also includes any other…