nerdexam
Isaca

CDPSE · Question #236

Information should only be considered personal information if it:

The correct answer is A. relates directly or indirectly to an individual. Personal information (personal data) is defined broadly across most privacy frameworks as any information that relates, directly or indirectly, to an identified or identifiable natural person. This includes names, IP addresses, location data, and even indirect identifiers. The…

Privacy Governance

Question

Information should only be considered personal information if it:

Options

  • Arelates directly or indirectly to an individual.
  • Bappears in a digital or electronic format.
  • Cis classified as sensitive and confidential.
  • Dis objectively accurate or verifiable.

How the community answered

(28 responses)
  • A
    89% (25)
  • B
    4% (1)
  • C
    7% (2)

Explanation

Personal information (personal data) is defined broadly across most privacy frameworks as any information that relates, directly or indirectly, to an identified or identifiable natural person. This includes names, IP addresses, location data, and even indirect identifiers. The format (B) - digital or paper - is irrelevant to classification. Not all personal data is sensitive or classified (C). Accuracy or verifiability (D) has no bearing on whether information is personal - even inaccurate data about a person is still personal information.

Topics

#Personal Information#PII#Data Definition

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice