Personally identifiable information (PII) is any data that can be used to identify, contact, or locate a specific
individual, either alone or combined with other sources. PII includes information such as name, address, phone
number, email address, social security number, etc. Patient names are examples of PII, and therefore the data
that contains them should be masked or anonymized to protect the privacy and security of the patients.
Confidential information, protected health information, and security clearance are not types of data, but rather
categories or levels of data sensitivity that may require different degrees of protection or access control.
References = CompTIA Project+ Study Guide, Chapter 3: Project Planning, Section 3.4: Data Privacy and
Security, p. 121; Patient Data: Types, Uses & Hospital Patient Databases; What is Patient Data and Why Is It
Important?; Chapter 1 - Registrar Playbook