xref SP 800-122 (DOI) This training is intended for DOD civilians, military members, and contractors using DOD information systems. In others, they may need a name, address, date of birth, Social Security number, or other information. This includes information like Social Security numbers, financial information, and medical records. PII stands for personally identifiable information. This interactive presentation reviews the definition of personally identifiable information (PII), why it is important to protect PII, the policies and procedures related to the use and disclosure of PII, and both the organization's and individual's responsibilities for safeguarding PII. The following are some examples of information that can be considered PII: Several merchants, financial institutions, health organizations, and federal agencies, such as the Department of Homeland Security (DHS), have undergone data breaches that put individuals PII at risk, leaving them potentially vulnerable to identity theft. The Federal government requires the collection and maintenance of PII so as to govern efficiently. When collecting PII, organizations should have a plan in place for how the information will be used, stored, and protected. PII can be used to commit identity theft in several ways. Privacy Statement, Stuvia is not sponsored or endorsed by any college or university, Pennsylvania State University - All Campuses, Rutgers University - New Brunswick/Piscataway, University Of Illinois - Urbana-Champaign, Essential Environment: The Science Behind the Stories, Everything's an Argument with 2016 MLA Update, Managerial Economics and Business Strategy, Primates of the World: An Illustrated Guide, The State of Texas: Government, Politics, and Policy, IELTS - International English Language Testing System, TOEFL - Test of English as a Foreign Language, USMLE - United States Medical Licensing Examination, Identifying and Safeguarding PII V4.0 (2022);TEST OUT Qs & Final Test Solved completely. Minimize the use, display or storage of Social Security Numbers (SSN) and all other PII. Company Registration Number: 61965243 SP 800-122 (EPUB) (txt), Document History: Skysnag helps busy engineers enforce DMARC, responds to any misconfigurations for SPF or DKIM which increases email deliverability, and eliminates email spoofing and identity impersonation. Identity thieves are always looking for new ways to gain access to peoples personal information. Safeguard DOL information to which their employees have access at all times. 0 The document also suggests safeguards that may offer appropriate levels of protection for PII and provides recommendations for developing response plans for incidents involving PII. PII is any information that can be used to identify a person, such as your name, address, date of birth, social security number, and so on. 0000003346 00000 n The purpose of this document is to assist Federal agencies in protecting the confidentiality of personally identifiable information (PII) in information systems. The regulation applies to any company that processes the personal data of individuals in the E.U., regardless of whether the company is based inside or outside the E.U. This information can include a persons name, Social Security number, date and place of birth, biometric data, and other personal information that is linked or linkable to a specific individual. PHI is a valuable asset and is sold on the dark web for more money than any other data set, according to Ponemon Institute. Product Functionality Requirements: To meet technical functionality requirements, this product was developed to function with Windows operating systems (Windows 7 and 10, when configured correctly) using either Internet Explorer . 147 0 obj <> endobj To be considered PII, the data must be able to be used to distinguish or trace an individuals identity. Some accounts can even be opened over the phone or on the internet. @media only screen and (min-width: 0px){.agency-nav-container.nav-is-open {overflow-y: unset!important;}} .table thead th {background-color:#f1f1f1;color:#222;} PII is regulated by a number of laws and regulations, including the Gramm-Leach-Bliley Act, the Fair Credit Reporting Act, and the Health Insurance Portability and Accountability Act. Within HIPAA are the privacy rule and the subsets, security rule, enforcement rule, and breach notification rule which all deal with various aspects of the protection of PHI. Non-sensitive PII is information that can be used to identify an individual, but that is not likely to be used to harm them if it falls into the wrong hands. In terms of the protection of PHI, HIPAA and the related Health Information Technology for Economic and Clinical Health Act (HITECH) offer guidelines for the protection of PHI. Popular books. This document provides practical, context-based guidance for identifying PII and determining what level of protection is appropriate for each instance of PII. In addition to the forgoing, if contract employees become aware of a theft or loss of PII, they are required to immediately inform their DOL contract manager. Federal Information Security Modernization Act; OMB Circular A-130, Want updates about CSRC and our publications? .cd-main-content p, blockquote {margin-bottom:1em;} %PDF-1.5 % 0000001903 00000 n .manual-search ul.usa-list li {max-width:100%;} [CDATA[/* >*/. The Department of Energy defines PII as any information collected or maintained by the department about an individual that could be used to distinguish or trace their identity. This Handbook provides best practices and DHS policy requirements to prevent a privacy incident involving PII/SPII during all stages of the information lifecycle: when collecting, storing, using, disseminating, or disposing of PII/SPII. Avoid compromise and tracking of sensitive locations. > PII/PHI Personally Identifiable Information (PII) is information that can be used to distinguish or trace an individual's identity, either alone or when combined with other information that is linked or linkable to a specific individual. The act requires that schools give parents and students the opportunity to inspect and correct their educational records and limits the disclosure of educational records without consent. hb```> AX @Lt;8w$02:00H$iy0&1lcLo8y l ;SVn|=K The launch training button will redirect you to JKO to take the course. 136 0 obj <> endobj PHI is one of the most sought-after pieces of data that a cybercriminal has in their sights. #views-exposed-form-manual-cloud-search-manual-cloud-search-results .form-actions{display:block;flex:1;} #tfa-entry-form .form-actions {justify-content:flex-start;} #node-agency-pages-layout-builder-form .form-actions {display:block;} #tfa-entry-form input {height:55px;} Unlock insights, bypass email authentication configuration issues including SPF and DKIM; and protect your domain from spoofing with strict DMARC enforcement, all autonomously with Skysnag. The course is designed to prepare DOD and other Federal employees to recognize the importance of PII, to identify what PII is, and why it is important to protect PII.

Rhodes Funeral Home Obituary, Articles I