Indicating PII i.e. Personally Identifiable data category or categories in combination about dpv HOT 6 CLOSED

This implies that there should be a concept PII representing Personally Identifiable Information. However, whether to indicate this using the conventional definition (data that enables identification) or newer ISO definition (data that used by itself or in combination with others can identify the data subject) is up for discussion. My suggestion is to utilise the ISO definition, and mark is as a subtype of Personal Data with a note indicating that there is a 'gap' between the two. Would be good to have a source to cite for this though.

from dpv.

We discussed in today's meeting and decided to add a note regarding definition of PII varying and therefore we not providing a concrete concept for PII as it can be the same as personal data or a subset. We will rethink how to provide this as a label or concept for specific jurisdictions that require it.

from dpv.

I've added a note to the Primer at https://w3c.github.io/dpv/primer/#personal-data stating that we're exploring PII as a concept, or as a label. The issue will remain open for discussion.

from dpv.

We can have IdentifyingPersonalData with further types as ExplicitlyIdentifyingPersonalData and IndirectlyIdentifyingPersonalData

from dpv.

Comment by @coolharsh55 via IRC channel #dpvcg on irc.w3.org

this was discussed in today's meeting and accepted as concepts to indicate identifying with distinction between explicit and indirect. These will be accepted in the next meeting.

from dpv.

Comment by @coolharsh55 via IRC channel #dpvcg on irc.w3.org

concepts have been accepted in today's meeting

from dpv.