Guest
PII and free text fields in information systems
Regarding data protection – if there was a free text field, is there the risk of PII being invoked?
Assign topic to the user
ISO 27001 INFORMATION SECURITY POLICY
Define the main rules for information security management.
Get it now 
ISO 27001 INFORMATION SECURITY POLICY
Define the main rules for information security management.
Get it now
ISO 27001 INFORMATION SECURITY POLICY
Define the main rules for information security management.
Get it now
Expert
Rhand Leal
Sep 23, 2016
Answer:
The concern is valid. A sugested protection in this case would be to include a text in the page that contains the free text field explictly informing that in that specific text filed no PII is required and that by including PII the user is assuming the risk to exposed his/her information. Of course, this solution should be review by a lawyer regarding legal issues you organization must be compliant with.
Comment as guest or Sign in
Sep 23, 2016
Sep 23, 2016
Sep 23, 2016