Certified Information Privacy Professional – United States (CIPP/US) — Question 159
Under state breach notification laws, which is NOT typically included in the definition of personal information?
Answer options
- A. State identification number
- B. First and last name
- C. Social Security number
- D. Medical information
Correct answer: D
Explanation
Medical information is often not classified as personal information under state breach notification laws compared to the other options listed. The state identification number, first and last name, and Social Security number are all considered sensitive personal information that requires notification in the event of a breach.