Personally identifiable information (PII)

What is personally identifiable information (PII)?

Personally identifiable information (PII) is an American legal term for any data that could identify a specific individual.

PII may include the following:

  • Full name
  • Home address
  • Email address
  • Social security number
  • Device identifiers
  • Email addresses
  • Passport number
  • Driver’s license number
  • Credit card number
  • Date of birth
  • Telephone number
  • Owned properties, e.g., vehicle identification number (VIN)
  • Login details
  • Processor or device serial number
  • Media access control (MAC)
  • Internet Protocol (IP) address
  • Device IDs
  • Cookies

US government agencies and non-governmental organizations often reference PII. The US lacks an overriding law covering PII in all 50 states, so your understanding of PII may differ depending on the state or sector you operate in. A standard definition is provided by the National Institute of Standards and Technology (NIST):

PII is any information about an individual maintained by an agency, including (1) any information that can be used to distinguish or trace an individual‘s identity, such as name, social security number, date and place of birth, mother‘s maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information.

You may also like:


  • Digital marketing in the energy sector: Key challenges and fixes

    Summary The European energy and utilities sector is changing quickly. Customers expect smooth digital experiences, personalized communication, and easy access to their data. At the same time, regulators continue to tighten privacy and security standards across the EU. For marketing teams, this creates a familiar dilemma – how to deliver relevant, data-driven experiences while staying…

  • From Customer Data Platform to Data Activation: Why we’re evolving our approach

    Our Customer Data Platform module is now called Data Activation, reflecting a fundamental shift from data collection to outcome-driven action. We’re changing more than just a name – we’re refocusing on what truly matters: turning behavioral insights into immediate business results.