Training modules/dashboard/slides/30102-defining-personal-information

Defining personal information

Nonpublic PI is defined as any information that can be used to personally identify a user. This includes, but isn’t limited to, any of the following that have not already been made public by the user themselves on the projects or elsewhere:

• names;
• addresses;
• phone numbers;
• email addresses;
• passwords;
• government ID numbers;
• IP addresses; and
• user agent information.

The most common types of nonpublic PI handled by functionaries are email addresses, IP addresses, user agent information, and names. However, functionaries should be aware of the other types of information that qualify. In addition, although not personally identifying by themselves, each of the following is considered nonpublic PI when associated with either the above or with a user’s account:

• date of birth;
• gender;
• sexual orientation;
• racial or ethnic origins;
• marital or familial status;
• medical conditions or disabilities;
• political affiliations; and
• religion.

Be sure to refer back to the Privacy Policy or contact privacy@wikimedia.org if you have questions about whether specific information qualifies as PI.

Examples

1. Because user:Rory publicly stated his real name, email address, address, and phone number on his user page, none of this is considered PI.
2. However, if Rory had not disclosed his real name, email address, address, and phone number, these would be considered PI.
3. Rory’s IP address and user agent information is PI.
4. If Rory has not disclosed that he is unmarried, a statement that links his marital status with his username contains PI.