Personally Identifiable Information (PII)
Definition
Personal data can be assigned to an identified or identifiable person.
Information relating to an identified or identifiable natural person.
Simply explained
Information such as email address or customer number can be linked to an individual person.
Why it matters in practice
The term supports companies in selecting technologies sensibly, anchoring them organizationally, and using them competently.
Example from business
Customer number, email, and contract data are protected according to purpose, access, and retention.
Limits and pitfalls
- Use a fixed PII list as a complete boundary or automatically consider pseudonymized and indirectly identifiable data as anonymous.
Origin & history
Article 4 GDPR defines personal data very broadly in the EU. The term PII used in other legal and security contexts is not identical.
Use in mid-sized companies
- Possible application: Customer number, email, and contract data are protected according to purpose, access, and retention.
Frequently asked questions
What does Personal Data mean?
Information relating to an identified or identifiable natural person. What mistakes should be avoided? Use a fixed PII list as a complete boundary or automatically consider pseudonymized and indirectly identifiable data as anonymous.
Sources
Source checked on 10.10.2026. Editorial application examples are hypothetical; no evidence of real customer results.
Editorially reviewed on: