Questions tagged [pii]

PII stands for Personally Identifiable Information -- that information which can uniquely identify an individual.

PII stands for Personally Identifiable Information -- that information which can uniquely identify an individual.

Some examples of PII include phone number, home address or (in the USA) social security number.

Some locations will have laws requiring information systems implementers to protect PII for users of their systems. Protecting PII (especially on the internet) has become more and more important as interests looking to discover PII have prevalent.

However, PII is a legal concept, not a technical concept. Because of the versatility and power of modern re-identification algorithms, the absence of PII data does not mean that the remaining data does not identify individuals. While some attributes may be uniquely identifying on their own, any attribute can be identifying in combination with others.

80 questions
1
vote
2 answers

JSON PII data masking in Java

I would like to mask certain elements of JSON and print to logs. Masking can be either by substituting by dummy data or removing the key pair .Is there a utility to do the masking in Java ? E.g., given JSON: { "key1":"value1", …
josh
  • 13,793
  • 12
  • 49
  • 58
0
votes
0 answers

[Google]Are the sub and name and email from the userinfo endpoint confidential or public?

We use https://www.googleapis.com/oauth2/v3/userinfo to get user information, use name as a display name and sub as the google user id, we don't want to violate the PII, so want to confirm whether the sub and name and email are confidential or…
Ward Miao
  • 1
  • 1
0
votes
1 answer

google DLP Masking not working for characters which i want to ignore

I am trying to use Google DLP to Mask PII information using below code. from typing import List import google.cloud.dlp_v2 def deidentify_with_mask( project: str, input_str: str, info_types: List[str], masking_character: str =…
0
votes
0 answers

Extract schema name based on current Snowflake column

I am working on a Snowflake tag and masking policy combination and was poking around to see if there is a way to dynamically extract the schema_name of the current working column. I was not able to find anything that matched the requirement. Is it…
0
votes
1 answer

Best way to transmit sensitive data during SSO redirect between two sites

I am trying to figure out an appropriate and secure design for the following scenario: A user starts out in a "human resources" portal (see payroll info, manage PTO, enroll for insurance benefits, etc). As part of the annual insurance benefits…
Christoph
  • 2,211
  • 1
  • 16
  • 28
0
votes
1 answer

How do I avoid giving all users access to PII of other users in the system?

I'm working on a project that uses JWTs for auth and I have removed all PII from the JWT, only leaving the userId in it. I have an API for users that allows any authorized user to retrieve all users (with searching) or a single user (by their id)…
0
votes
1 answer

How to extract a non-English address from a string

It would be a big help if someone here knows about a library for python that can extract from a whole message only an address in Turkey (the text is originally in Turkish). A translated example would be: "Hi, my name is Salem and I have information…
Tavlin
  • 1
  • 1
0
votes
0 answers

Are user names in pats pii personally identifiable information?

We are starting to log unhandled exceptions from an app to a third party provider so we know what kind of errors our users are facing. When calling code like File.Open it includes path information in the unhandled exception…
Fritjof Berggren
  • 3,178
  • 5
  • 35
  • 57
0
votes
0 answers

How does this javascript variable exactly work? (Exluding personal info from the URL)

I'm planning to use a javascript variable to replace certain keywords (pii:s) from the URL before sending it from GTM to GA4. I have encountered a javascript variable that replaces certain "banned" keywords from the query string. I don't know…
nakata
  • 49
  • 3
0
votes
1 answer

Does the Amazon SP-API getOrderAddress operation work outside the sandbox?

As far as I know, there 2 kinds of developer access for the Amazon SP-API: one that allows access to Personally Identifiable information (PII) and one that doesn't. My Amazon SP-API developer profile is NOT supposed to have access to PII, however,…
0
votes
1 answer

Randomly occurring Unable to retrieve document from: '[PII is hidden]'

I came along with so many questions and answers but could not understand or find solution as my case is bit different. I am using Azure with openIdconnect for Active directory authentication (ASP.Net framework 4.6.1) it has been years it was working…
user2496608
  • 115
  • 9
0
votes
0 answers

Pattern searching with JPA converter for encrypted text

I am using spring jpa with mysql database to encrypt the PII data by using the @convert annotation. The encryption and decryption is working properly. The problem is with search functionality. When i am searching with full text, search is working…
0
votes
1 answer

Azure PII minimumPrecision Filter

I am trying to filter results by minimum precision to exclude any PII names that are too low in confidence (.5) using python and Azures PII cognitive…
0
votes
2 answers

How to send alert when a query hits certain threshold in Snowflake?

I am trying to set up alert if someone tries to query > threshold of sensitive data(eg email) in Snowflake. How can I achieve this?
piya
  • 27
  • 6
0
votes
0 answers

phonenumbers - check phone number validity for any country

I am using the phonenumbers module to detect if a number is a valid phone number. I would like my script to consider all possible countries (that is, all possible national prefixes) when doing so. How can I do that? At the moment, I can only detect…
albus_c
  • 6,292
  • 14
  • 36
  • 77