4. of Inference
You use your users’ names or email addresses as reference keys between systems, even though we could use random identifiers.
|
Threat |
|
|
|
You are using names or email addresses to reference your data, which means that the data is not easily anonymized. You may end up with name clashes that result in incorrect data. Email addresses may be reused if an email account is abandoned or a shared account is used, again resulting in incorrect data. |
|
GDPR |
Chapter 2, Art. 5 – 1. (d) Chapter 2, Art. 5 – 1. (e) |
|
CCPA & CPRA |
CCPA 1798.140. Definitions (m)(1) CCPA 1798.140. Definitions (m)(2) |
|
OECD |
N/A |
|
Mitigations... |
