Data which can / cannot be collected in forms
When creating forms, be aware of the data types which can or cannot be collected.
The rule is simple...
- If it falls under PII, you can request it in a form.
- If it's considered SPII, you cannot request it in a form. Any data collected which Saffire identifies as non-compliant is subject to removal without prior notification.
PII
Personally Identifiable Information
- Name
- Address
- Phone number
- IP address
- Any other information that can uniquely identify someone
SPII
Sensitive Personally Identifiable Information
Stand Alone data
- Credit Card information
- Social Security Number
- Driver's License or State ID
- Alien registration number
- Financial Account number
- Biometric identifiers
- Passport number
Any PII Combined with the Following
- Account passwords
- Date of birth
- Last 4 digits of SSN
- Citizenship or immigration status
- Medical information
- Personal financial information
- Sexual orientation
- Ethnic or religious affiliation
- Criminal history
- Mother's maiden name
- Any other information which if lost, compromised, or disclosed without authorization, could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual.