Main content
Internet safety
Course: Internet safety > Unit 1
Lesson 3: Going deeper with personally identifiable information(PII) Personally Identifiable Information
Personally Identifiable Information (PII) includes things that can identify you directly, such as your social security number, to things that may help identify you indirectly, such as your phone number or birthday. If that information falls into the wrong hands, you could be tracked without your knowledge or even have your identity stolen. Created by Sal Khan.
Want to join the conversation?
- What is Personally Identifiable Information?(0 votes)
- Personally Identifiable Information is any information that can be found to personally identify you, such as name, address, ssn, credit card info, etc(12 votes)
- how long on average does this course take?(4 votes)
- What could be legitimate, legal reasons to give someone your PII? Obviously hospitals would need your real info...(4 votes)
- A lot of things related to finances (such as applying for loans or opening a bank account) will require PII.(3 votes)
- what if some type of hacker get your password and then you change it will they be able to still get in your own account?(2 votes)
- If you change the password, then probably not. However, they could have added their information to the account recovery options (assuming the account has one), so they could get back into the account. Of course, if they did that, then they likely would have also changed the password to prevent you from getting back into the account and changing it yourself.
One thing to keep in mind though is that even if you change the password for that account, the hacker will likely try to use that password on other accounts because people tend to reuse passwords. This type of attack is called credential stuffing and is quite common. That is why you should never reuse passwords.(2 votes)
- Social Security Number. It is unique for United States residents, and is a nine-digit number issued to U.S. citizens, permanent residents, and temporary (working) residents.
It has since come to be used as an identifier for individuals within the United States, although rare errors occur where duplicates do exist. Thus it is classified as a PII.(3 votes)
- who is allowed to know your PII(2 votes)
- Really the only person that is actually allowed to know your PII is you.(1 vote)
- How is PII crucial to protecting your data?(2 votes)
- because it is essential in preventing unauthorized access to, use, or disclosure of sensitive personal data.(1 vote)
- Sal, I thought you was actually telling us your SSN, or social security number.(2 votes)
- What if a real scam is watching this too?(1 vote)
- If a real scam is watching this, too, then don't put any personally identifiable information here.(2 votes)
- how does this affect us?(1 vote)
- Your PII is everything about you as a human being, it affect your GREATLY.
Happy Learning!(2 votes)
Video transcript
- Hi everyone. Sal Khan here from Khan academy. My Social Security Number is 857, - 32 - 5567. No, it's not. I wouldn't tell you my Social
Security Number like that. And that's because it is personally identifiable
information, or PII. And there's a reason why
you want to keep that to yourself, or at least
limit who has access to PII. Because if someone has access,
they can expose your privacy, tell the world where you
live, they could track you and they could tell the
world what you've been up to, maybe when you should be working what websites you're visiting, or, even worse, potentially,
they could steal your identity, take money out of your bank account, take a credit card in your name, do some other form of identity theft that could be embarrassing,
or super costly. So, if you have some type of a service, either online or otherwise,
that's asking for something like your Social Security Number, or your birthday, which might
be a little bit more indirect, or your email address,
or your phone number, you might ask why. Sometimes there's a legitimate reason why they need to know these things but many times, I'd argue
even most of the time, there might not be a legitimate reason. And so you need to ask yourself, well what are they going to do with it? And if you don't feel comfortable
giving that information, ask yourself, do you
really need that service? So think seriously about your PII. Unfortunately, bad actors
on the Internet are coming up with new ways of
leveraging both direct PII, personally identifiable information like Social Security Numbers, even biometrics, even your name, and indirect measures, or
indirect pieces of PII, like your birthday, or your
address, or your email address, or your phone number,
that can be put together to do shady things with your identity. So be very careful.