ISO/IEC 29100:2024 情報技術 | ページ 6

3.1

anonymity

characteristic of information that does not permit a personally identifiable information principal (3.9) to be identified directly or indirectly

3.2

anonymization

process by which personally identifiable information (PII) (3.7) is irreversibly altered in such a way that a PII principal (3.9) can no longer be identified directly or indirectly, either by the PII controller alone or in collaboration with any other party

3.3

anonymized data

data that has been produced as the output of a personally identifiable information (3.7) anonymization (3.2) process

3.4

consent

personally identifiable information (PII) principal’s (3.9) freely given, specific and informed agreement to the processing of their PII

3.5

identifiability

condition which results in a personally identifiable information (PII) principal (3.9) being identified, directly or indirectly, on the basis of a given set of PII

3.6

opt-in

process or type of policy whereby the personally identifiable information (PII) principal (3.9) is required to take an action to express explicit, prior consent (3.4) for their PII to be processed for a particular purpose

Note 1 to entry: A different term that is often used with the privacy principle"consent and choice" is “opt-out”. It describes a process or type of policy whereby the PII principal is required to take a separate action in order to withhold or withdraw consent, or oppose a specific type of processing. The use of an opt-out policy presumes that the PII controller has the right to process the PII in the intended way. This right can be implied by some action of the PII principal different from consent (e.g. placing an order in an online shop).

3.7

personally identifiable information

PII

information that (a) can be used to establish a link between the information and the natural person to whom such information relates, or (b) is or might be directly or indirectly linked to a natural person

Note 1 to entry: The “natural person” in the definition is the PII principal (3.9) . To determine whether a PII principal is identifiable, account should be taken of all the means which can reasonably be used by the privacy stakeholder holding the data, or by any other party, to establish the link between the set of PII and the natural person.

3.8

PII controller

privacy stakeholder (or privacy stakeholders) that determines the purposes and means for processing personally identifiable information (PII) (3.7) other than natural persons who use data for personal purposes

Note 1 to entry: A PII controller sometimes instructs others [e.g. PII processors (3.10) ] to process PII on its behalf while the responsibility for the processing remains with the PII controller.

3.9

PII principal

data subject

natural person to whom the personally identifiable information (PII) (3.7) relates

3.10

PII processor

privacy stakeholder that processes personally identifiable information (PII) (3.7) on behalf of and in accordance with the instructions of a PII controller (3.8)

3.11

privacy breach

situation where personally identifiable information (3.7) is processed in violation of one or more relevant privacy safeguarding requirements

3.12

privacy control

measure that treats privacy risks by reducing their likelihood or their consequences

Note 1 to entry: Privacy controls include organizational, physical and technical measures, e.g. policies, procedures, guidelines, legal contracts, management practices or organizational structures.

Note 2 to entry: Control is also used as a synonym for safeguard or countermeasure.

3.13

privacy enhancing technology

PET

privacy control (3.12) , consisting of information and communication technology (ICT) measures, products, or services that protect privacy by eliminating or reducing personally identifiable information (PII) (3.7) or by preventing unnecessary and/or undesired processing of PII, all without losing the functionality of the ICT system

Note 1 to entry: Examples of PETs include, but are not limited to, anonymization (3.2) and pseudonymization (3.22) tools that eliminate, reduce, mask, or de-identify PII or that prevent unnecessary, unauthorized and/or undesirable processing of PII.

Note 2 to entry: Masking is the process of obscuring elements of PII.

3.14

privacy policy

overall intention and direction, rules and commitment, as formally expressed by the personally identifiable information (PII) controller (3.8) related to the processing of PII (3.7) in a particular setting

3.15

privacy preference

specific choices made by a personally identifiable information (PII) principal (3.9) about how their PII (3.7) should be processed for a particular purpose

3.16

privacy principle

shared value governing the privacy protection of personally identifiable information (PII) (3.7) when processed in information and communication technology systems

3.17

privacy risk

effect of uncertainty on privacy

Note 1 to entry: Risk is defined as the “effect of uncertainty on objectives” in ISO Guide 73 ¹ and ISO 31000.

Note 2 to entry: Uncertainty is the state, even partial, of deficiency of information related to, understanding or knowledge of, an event, its consequence, or likelihood.

3.18

privacy impact assessment

privacy risk assessment

overall process of identifying, analysing, evaluating, consulting, communicating and planning the treatment of potential privacy impacts with regard to the processing of personally identifiable information (3.7) , framed within an organization’s broader risk management framework

3.19

privacy safeguarding requirement

requirement that an organization takes into account when processing personally identifiable information (PII) (3.7) with respect to the privacy protection of PII

3.20

privacy stakeholder

natural or legal person, public authority, agency or any other body that can affect, be affected by, or perceive themselves to be affected by a decision or activity related to personally identifiable information (PII) (3.7) processing

3.21

processing of PII

operation or set of operations performed upon personally identifiable information (PII) (3.7)

Note 1 to entry: Examples of processing operations of PII include, but are not limited to, the collection, storage, alteration, retrieval, consultation, disclosure, anonymization (3.2) , pseudonymization (3.22) , dissemination or otherwise making available, deletion or destruction of PII.

3.22

pseudonymization

process applied to personally identifiable information (PII) (3.7) which replaces identifying information with an alias

Note 1 to entry: Pseudonymization can be performed either by PII principals (3.9) themselves or by PII controllers (3.8) . Pseudonymization can be used by PII principals to consistently use a resource or service without disclosing their identity to this resource or service (or between services), while still being held accountable for that use.

Note 2 to entry: Pseudonymization does not rule out the possibility that there can be (a restricted set of) privacy stakeholders (3.20) other than the PII controller of the pseudonymized data which are able to determine the PII principal’s identity based on the alias and data linked to it.

3.23

sensitive PII

category of personally identifiable information (PII) (3.7) , either whose nature is sensitive, such as those that relate to the PII principal’s (3.9) most intimate sphere, or that can have a significant impact on the PII principal

Note 1 to entry: In some jurisdictions or in specific contexts, sensitive PII is defined in reference to the nature of the PII and can consist of PII revealing the racial origin, political opinions or religious or other beliefs, personal data on health, sex life or criminal convictions, as well as other PII that can be defined as sensitive.

3.24

third party

privacy stakeholder (3.20) other than the personally identifiable information (PII) principal (3.9) , the PII controller (3.8) and the PII processor (3.10) , and the natural persons who are authorized to process the data under the direct authority of the PII controller or the PII processor