PII Check - Breach Notification

The playbook checks for all various types of PII, however, each state determines what is considered PII, and which PII requires notification. DISCLAIMER: Please consult with your legal team before implementing this playbook. **Sources: http://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.82 https://www.nysenate.gov/legislation/laws/GBS/899-AA and more for each state.

US - Breach Notification · 18 tasks · 0 inputs · 0 outputs

Flowchart

Yes Yes Yes Yes Yes Yes Yes Start Start PII Classification Check PII Classification Check Does data contain medical information? Does data contain medical... Does data contain financial information? Does data contain financi... Does data contain health insurance information? Does data contain health ... Check If PII Compromised Check If PII Compromised Does data contain unique identification number? Does data contain unique ... Does data contain account information? Does data contain account... Does data contain unique biometric data? Does data contain unique ... Set Medical Information Breached flag - Set Set Medical Information B... Set Set Health Insurance Breached flag - Set Set Health Insurance Brea... Set Set Financial Information Breached flag - Set Set Financial Information... Set Set Account Information Breached flag - Set Set Account Information B... Set Set Unique Identification Number Breached flag - Set Set Unique Identification... Set Set Unique Biometric Data Breached flag - Set Set Unique Biometric Data... Set Done Done Is there any other data that can be considered PII? Is there any other data t... Set Other PII Data Breached flag - Set Set Other PII Data Breach... Set