To: Direct Access Working Group - Team D From: Rich Jarvinen, SDG&E Date: July 12, 1996 Re: DEFINITIONS FOR DIFFERENT TYPES OF INFORMATION Per DAWG Team D's request, following are proposed definitions to be included in the August 30th report glossary. These definitions will be the foundation upon which some concepts within Section 10.0, Access to Customer Information, will be built. Please provide me with comments and suggestions to help clarify these terms. Thanks, PERSONAL INFORMATION - Information that can be linked to an individual or distinct group of individuals.(A) SENSITIVE PERSONAL INFORMATION - Personal information that if disclosed or used inappropriately, creates the potential for harm to the individual.(B) It includes social security numbers, passkeys, and information related to helath care, political persuasion, sexual matters and orientation, and personal finances.(C) Following are definitions that I propose, adapted from the above as well as work done under Group D: NON-SENSITIVE PERSONAL INFORMATION - Personal information that when disclosed creates little potential for harm to the individual either under specific provisions of use, or misuse once probability of misuse is considered. Personal information that, when used per specific legal or regulated provisions and under strict control, creates little potential for harm is considered to be non-sensitive. IMPERSONAL INFORMATION - Information that cannot be linked to an individual or distinct group of individuals. CUSTOMER-SPECIFIC INFORMATION - Information that describes an individual's characteristics, with or without linking that information to a specific individual or distinct group of individuals. AGGREGATE INFORMATION - Listed or summary information compiled in a single place representing more than one individual. --------------------------------- (A) Privacy and the NII: Safeguarding Telecommunications-Related Personal Information, National Telecommunications and Information Administration (NTIA) under the U.S. Department of Commerce, October 1995, p. 6 (Hereafter referred to as NTIA Report). (B) Adapted from Privacy and the National Information Infrastructure: Principles for Providing and Using Personal Information, Privacy Working Group, Information Policy Committee, Information Infrastructure Task Force, U.S. Department of Commerce, p. 3 (Hereafter referred to as NII Report) (C) NTIA Report, Footnote 100, p. 50 cc: TS42736 --VMSDGE1 Jarvinen, Richard Rich Jarvinen 654-1240, INTERNET: US5LNB96@IBMMAIL.COM CP-4200B .