Questions tagged [pii]

PII stands for Personally Identifiable Information -- that information which can uniquely identify an individual.

PII stands for Personally Identifiable Information -- that information which can uniquely identify an individual.

Some examples of PII include phone number, home address or (in the USA) social security number.

Some locations will have laws requiring information systems implementers to protect PII for users of their systems. Protecting PII (especially on the internet) has become more and more important as interests looking to discover PII have prevalent.

However, PII is a legal concept, not a technical concept. Because of the versatility and power of modern re-identification algorithms, the absence of PII data does not mean that the remaining data does not identify individuals. While some attributes may be uniquely identifying on their own, any attribute can be identifying in combination with others.

80 questions
2
votes
2 answers

Remove personal information from mixpanel javascript tracking call

I'm currently integrating with MixPanel's javascript library and have run into an issue that MixPanel does not seem to have thought about. Our company deals with personally identifiable information(PII), and therefore some data that we pass as…
2
votes
2 answers

Why does deleted data persist in SQL Server backup file?

I want to make a backup of my SQL Server database so I can send it to my vendor to help with diagnosis. However, I don't want to include the data from tables with customer information. Here's what I tried: make a copy of the database, delete all the…
krubo
  • 5,969
  • 4
  • 37
  • 46
1
vote
1 answer

How to Mask PII data in AWS ORACLE RDS?

I am trying to mask PII data without any encryption/decrytion at application level. WHat are the different ways to mask the data. Azure provides out of box service, where we can give schema name and column name for maksing the data, but couldn't…
HMT
  • 2,093
  • 1
  • 19
  • 51
1
vote
3 answers

Mask values in a SQL Query string for SQL Server

I am a SQL Server DBA. I would like to write a procedure which I can provide to rest of my team where they can view the text for currently running queries on the server (Similar to how we view in sp_who2) but with all the values…
Raman
  • 216
  • 3
  • 15
1
vote
1 answer

PII checker with snowflake

I am using PII checker lib for scanning pii data in snowflake database. https://github.com/tokern/piicatcher][1] but scan_snowflake function is internally creating url with postgreSQL here is my code catalog_params = {"app_dir": ":memory:"} output =…
Astha Shah
  • 11
  • 2
1
vote
1 answer

Is there a way to create a masking policy accessible across all databases and schemas in Snowflake?

I created a masking policy that I can apply across different schemas and databases. However, unless I recreate the masking policy in each database schema combination it won't let me apply the policy. It would throw Masking policy…
1
vote
2 answers

Tagging tables/columns in Snowflake

A quick question please - Is there a good way of storing classification tags in Snowflake at table/column level? For example, tag a column with PII flag. I then like to read these tags through JDBC API. Appreciate your thoughts.
1
vote
0 answers

How to secure PII data in transit from REST API to browser

In our application, Organization/Employee Information has PII (Personally identifiable information) like Bank Account Info, Social Security number etc. This data is transmitted from the REST API response to the browser. We have already following…
VINAYRAM
  • 11
  • 5
1
vote
1 answer

marklogic PII access

I created a user that have a role with rest-read only. And an Entity that have an ID as primary key and PII. (The ID is a property of the instance). So when the user search some documents using a rest API, the ID is not hidden! I followed this…
manie
  • 355
  • 1
  • 5
  • 13
1
vote
1 answer

MWS Developer access for PII personal identifiable Information Revoked - Buyersname, phone, Addresses are coming blank

We are using Amazon Seller account and have been using MWS API for last 10 months. However this is the first time we got this issue. 1. All of our API is getting failed. 2. BuyerName, Addresses, phone are not coming from the MWS API. 3. In the XML,…
1
vote
0 answers

I have exactly same code in DEV and PROD and few properties(PII data) on PROD is masked and on DEV its not

I'm seeing SSN masked on PROD and it is not masked on DEV with same exact code. I looked up the stored procedures it is calling and it is simple select statement. I inquired DB admin and he said they are not doing any masking, since they are using…
ivj
  • 39
  • 6
1
vote
3 answers

Regex to identify a Medical Beneficiary Identifier(MBI) in python

So I am trying to create a regex for MBIs (medical beneficiary identifiers) in python and my regexes wont work. Any example of a MBi is: 1EG4-TE5-MK73 Here is the format to MBIs: 11-Characters The MBI’s 2nd, 5th, 8th, and 9th characters will…
James Davinport
  • 303
  • 7
  • 19
1
vote
5 answers

Bash: Need to replace different email addresses within a file

I'm trying to mask PII in a file (.json). The file contains different email addresses and I would like to change them with other different email addresses. For example: "results": [{…
David Kon
  • 65
  • 1
  • 1
  • 6
1
vote
5 answers

Does SSL use hashing internally?

We are in the process of certifying our health care product (Hitech certification). One of the criteria of the certification process is that our product should be capable of using "hashing" when sending patient information over the network. Our…
FatherFigure
  • 1,135
  • 1
  • 16
  • 39
1
vote
2 answers

How to check if any variable is being passed to GET in URL

I have a situation where someone is trying to sabotage my google adsense account by continuously sending personally identifiable information into the URL to my site. How can I block this or at least detect the random variables they are using? For…
Chris Hully
  • 33
  • 1
  • 4