Good reading, but I cannot agree with "the definition of PII is clear cut".
  Rather "*any* information pertaining to an identifiable individual" is
extremely vague.  And when they want us to try to 'secure' information that
is already 'public', we have to scratch our heads and wonder.
But at least he admits that there are tradeoffs.  The law (or a typical
organization's policy) does not seem to understand that.

Disclaimer: definitely not speaking for my employer.

-- 
Bob Harold


On Mon, Oct 27, 2014 at 3:46 AM, Stephane Bortzmeyer <[email protected]>
wrote:

> Good reading about the "blind spots" of engineers about privacy:
>
> http://lockstep.com.au/blog/2014/08/28/engineers-and-privacy
>
> _______________________________________________
> dns-privacy mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/dns-privacy
>
_______________________________________________
perpass mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/perpass

Reply via email to