CDPSE · Question #22
Which of the following should be considered personal information?
The correct answer is A. Biometric records. Biometric records - such as fingerprints, facial geometry, iris scans, and voiceprints - are uniquely tied to an individual and cannot be changed if compromised, making them highly sensitive personal information under virtually all modern privacy frameworks (GDPR, CCPA, BIPA, etc
Question
Which of the following should be considered personal information?
Options
- ABiometric records
- BCompany address
- CUniversity affiliation
- DAge
How the community answered
(24 responses)- A88% (21)
- C8% (2)
- D4% (1)
Explanation
Biometric records - such as fingerprints, facial geometry, iris scans, and voiceprints - are uniquely tied to an individual and cannot be changed if compromised, making them highly sensitive personal information under virtually all modern privacy frameworks (GDPR, CCPA, BIPA, etc.). A company address belongs to an organization, not a person. University affiliation and age, while sometimes personal in context, are not classified as inherently sensitive personal identifiers. Biometric data is often called out as a 'special category' of personal data requiring heightened protection precisely because it is immutable and directly identifies a specific individual.
Topics
Community Discussion
No community discussion yet for this question.