Difference PII VS Personal Data

Not Equal

• PII is a US term that has a much narrower definition than the EU personal data definition.
• the two terms have a different legal scope of what is covered
• We should use personal data for widest possible coverage
• PII is a smaller subset of personal data (“identifiable” vs “real world”).

Equal

• PII is internationally well defined in ISO/IEC 29100
• don’t think that “Personal Data” vs “PII” is a difference that matters vis-a-vis the standard
• PII and personal data actually are synonyms under some definitions.
• personal data has a very broad meaning (as does "PII" as defined by the US GSA and by ISO)