Handling personally identifiable information
You will almost certainly need to store PII somewhere in your application, so you need to be sure it is saved securely. PII includes the following:
- Names
- Dates of birth
- Birthplaces
- Names of family members
- Access keys
- Usernames or aliases
- Credit card numbers
- Email addresses
- Telephone numbers
- Physical addresses
- Social security or national insurance numbers
- IP addresses
- Passwords
- Personal photographs
- Passport information
- User gender
Some jurisdictions, such as General Data Protection Regulation (GDPR) regulations in the EU, include a further category of sensitive personal information that requires separate handling. This includes the following:
- Medical information
- Financial information
- Biometric information
- Education information
- Employment information
- Sexual orientation
- Political opinions
- Trade union membership
- Genetic data ...
