Data Access & Collection · Context
Personally identifying information is information usable for fraud, excluding publicly available details
Personally identifying information means information, including health information, that could be used to commit fraud or other illegal activity involving the credit, access to health care or identity of a Member, including Social Security numbers, account numbers, passwords or login credentials, or other methods to access or control a computing device or connected home device system identification. It does not include information otherwise available to the public, such as names and addresses. For data breach coverage the definition refers to the affected individual instead of a Member.
Details
- What it covers
- Social Security numbers, account numbers, passwords or login credentials, health information
- Exception
- Information otherwise available to the public, such as names and addresses
Supporting quotations
Personally identifying information
Personally identifying information means information, including health information, that could be used to commit fraud or other illegal activity involving the credit, access to health care or identity of a Member. This includes, but is not limited to, Social Security numbers, account numbers, passwords or login credentials, or other methods to access or control a computing device or connected home device system identification.
b. With respect to coverage B.2.h. Data Breach, personally identifying information means information, including health information, that could be used to commit fraud or other illegal activity involving the credit, access to health care or identity of an affected individual.
Personally identifying information does not mean or include information that is otherwise available to the public, such as names and addresses.
Computing device means a desktop, laptop or tablet computer or Wi-Fi router or other internet access point.
Connected home device means any electronic device, other than a computing device, that connects to the internet or to other electronic devices.
Qualifications & exceptions
- A stolen identity event, and therefore coverage, depends on the theft or release of a Member's personally identifying information.
Also annotated in the same passage (8)
- Computing devices and connected home devices must be owned or leased and under the Member's control
- A data breach event involves information in the Member's or an entrusted professional's custody
- A fraud event is a device-involved event causing direct financial loss
- Short definitions: public information, personally sensitive information, primary member, provider, school administrator
- Stolen identity event: theft or release of a Member's personal information
- System restoration costs cover professional restoration of a device, not hardware, upgrades or the Member's own time
- Excluded: devices not owned, leased or controlled; business losses; costs to correct deficiencies
- Cooperation: information within 30 days, device inspection and a sworn proof of loss within 60 days