ISO/IEC 27556:2022 情報セキュリティ、サイバーセキュリティ、プライバシー保護 — ユーザー中心のプライバシー設定管理フレームワーク | ページ 6

3.1

personally identifiable information

PII

information that (a) can be used to identify the PII principal (3.2) to whom such information relates, or (b) is or may be directly or indirectly linked to a PII principal

Note 1 to entry: To determine whether a PII principal is identifiable, account should be taken of all the means which can reasonably be used by the privacy stakeholder holding the data, or by any other party, to identify that natural person.

[SOURCE:ISO/IEC 29100:2011, 2.9, modified — The word “any” has been removed, “might” has been replaced by “may”.]

3.2

PII principal

natural person to whom the personally identifiable information (3.1) relates

Note 1 to entry: Depending on the jurisdiction and the particular data protection and privacy legislation, the synonym “data subject” can also be used instead of the term “PII principal”.

[SOURCE:ISO/IEC 29100:2011, 2.11]

3.3

PII controller

privacy stakeholder (or privacy stakeholders) that determines the purposes and means for processing personally identifiable information (3.1) other than natural persons who use data for personal purposes

Note 1 to entry: A PII controller sometimes instructs others (e.g. PII processors) to process personally identifiable information on its behalf while the responsibility for the processing remains with the PII controller.

Note 2 to entry: A PII principal (3.2) may sometimes be the “controller” of their own information where information and communication technology (ICT) systems are designed to enable direct control by the PII principal. In such cases the ICT system would be the PII processer responding to the PII controller who is also the PII subject.

[SOURCE:ISO/IEC 29100:2011, 2.10 — Note 2 to entry has been added.]

3.4

PII processor

privacy stakeholder that processes personally identifiable information (3.1) on behalf of and in accordance with the instructions of a PII controller (3.3)

[SOURCE:ISO/IEC 29100:2011, 2.12]

3.5

third party

privacy stakeholder other than the personally identifiable information (PII) principal (3.2) , the PII controller (3.3) and the PII processor (3.4) , and the natural persons who are authorized to process the data under the direct authority of the PII controller or the PII processor

[SOURCE:ISO/IEC 29100:2011, 2.27]

3.6

privacy stakeholder

natural or legal person, public authority, agency or any other body that can affect, be affected by, or perceive themselves to be affected by a decision or activity related to personally identifiable information (3.1) processing

[SOURCE:ISO/IEC 29100:2011, 2.22]

3.7

identifying attribute

attribute in a dataset that is able to contribute to uniquely identifying a PII principal (3.2) within a specific operational context

Note 1 to entry: ISO/IEC 20889:2018 uses a term “data principal” that is broader than “PII principal”. However, this document focuses on data sets related to PII principals.

[SOURCE:ISO/IEC 20889:2018, 3.14, modified — The word “data principal” has been changed to “PII principal” and Note 1 to entry added.]

3.8

control

measure that is modifying risk

Note 1 to entry: Controls include any process, policy, device, practice, or other actions which modify risk.

Note 2 to entry: It is possible that controls do not always achieve the intended or assumed modifying effect.

[SOURCE:ISO Guide 73:2009, 3.8.1.1, modified — Note 2 to entry has been changed.]

3.9

data transformation

process which creates new data from an original source

[SOURCE:ISO 5127:2017, 3.1.11.06]

3.10

de-identification technique

method for transforming a dataset with the objective of reducing the extent to which information is able to be associated with the PII principal (3.2)

Note 1 to entry: ISO/IEC 20889:2018 uses a term “data principal” that is broader than “PII principal”. However, this document focuses on data sets related to PII principals.

[SOURCE:ISO/IEC 20889:2018, 3.7, modified — The word “data principal” has been changed to “PII principal” and Note 1 to entry added.]

3.11

re-identification

process of associating data in a de-identified data set with the PII principal (3.2)

Note 1 to entry: A process that establishes the presence of a particular data principal in a dataset is included in this definition.

Note 2 to entry: ISO/IEC 20889:2018 uses a term “data principal” that is broader than “PII principal. However, this document focuses on datasets related to PII principals.

[SOURCE:ISO/IEC 20889:2018, 3.31, modified — The word “data principal” has been changed to “PII principal” and Note 2 to entry added.]

3.12

redaction

removal of a field such that it results in the irreversible and permanent removal of information contained within that field from the message

Note 1 to entry: The removal of a field only removes the information contained within that field. Information that can be derived from other fields of the message or from other sources is not removed.

[SOURCE:ISO/IEC 23264-1:2021, 3.21]

3.13

unlinkability

property that ensures that a PII principal (3.2) may make multiple uses of resources or services without others being able to link these uses together

[SOURCE:ISO/IEC TR 27550:2019, 3.25]

3.14

intervenability

property that ensures that PII principals (3.2) , PII controllers (3.3) , PII processors (3.4) and supervisory authorities can intervene in all privacy-relevant data processing

Note 1 to entry: The extent to which any of these stakeholders can intervene in data processing may be limited by relevant legislation or regulation.

[SOURCE:ISO/IEC TR 27550:2019, 3.6]

3.15

transparency

property that ensures that all privacy-relevant data processing including the legal, technical and organizational setting can be understood and reconstructed

[SOURCE:ISO/IEC TR 27550:2019, 3.24]

3.16

privacy preferences

specific choices made by a personally identifiable information (PII) principal (3.2) about how their PII (3.1) should be processed for a particular purpose

[SOURCE:ISO/IEC 29100:2011, 2.17]

3.17

privacy preference manager

PPM

component providing a capability allowing PII principals (3.2) to express privacy preferences (3.16) and a capability to monitor PII processing according to these privacy preferences

3.18

privacy preference administrator

PPA

privacy stakeholder which administrates a privacy preference manager (3.17)