Sometimes, a collection of data might be considered personally identifiable information, also known as PII, while the distinct data elements, by themselves, would not. For example, a date of birth alone can be shared by many individuals and is not considered PII. However, when combined with a name or information, it would significantly narrow the possibility of association with more individuals.

As security professionals, how do you protect this information?