Personally Identifiable Information (PII)
•Social security number
•State-issued driver’s license number
•State-issued identification card number
•Financial account number in combination with a security code, access code or password that would permit access to the account
•Medical and/or health insurance information
•Uniquely Identifying Student Data
Protected Health Information (PHI)
•Name
•Address (all geographic subdivisions smaller than state including street address, city, county, precinct or zip code)
•All elements of dates (except year) related to an individual including birth date, admissions date, discharge date, date of death and exact age (if over 89)
•Telephone numbers
•Fax numbers
•Electronic mail addresses
•Social security numbers
•Medical record numbers
•Health plan beneficiary numbers
•Account numbers
•Certificate/license numbers
•Vehicle identifiers and serial numbers, including license plate number
•Device identifiers and serial numbers
•Universal Resource Locators (URLs)
•Internet protocol (IP) addresses
•Biometric identifiers, including finger and voice prints
•Full face photographic images and any comparable images
•Any other unique identifying number, characteristic or code that could identify an individual
PCI Cardholder Data
The PCI Security Standards Council (SSC) defines ‘cardholder data’ as the full Primary Account Number (PAN) or the full PAN along with any of the following elements:
•Cardholder name
•Expiration date
•Service code