An internal auditor conducts a data privacy audit engagement. Which of the following will most likely be treated as personal information?
An internal auditor conducts a data privacy audit engagement. Which of the following will most likely be treated as personal information?
Personal information (or Personally Identifiable Information - PII) includes any data that can be used to identify an individual directly or indirectly. Behavioral information (e.g., browsing history, location patterns, shopping habits) is considered personal information because it can be linked to an individual and used for profiling or targeted actions.
IIAv7 Part 3 - Photographs and biometrix identifiers are other examples of PII, as is behavioural information, for example, in a customer relationship management system.