CISSP Study Guide: Information Privacy and Privacy Laws

Privacy is the legal protection from unauthorized publication of the individual’s personally identifiable information (PII). This right to privacy is exemplified in the following basic principles:

• Notice – regarding collection, use and disclosure of PII
• Choice – to opt out or opt in regarding disclosure of PII to third parties
• Access – by consumers to their PII to permit review and correction of information
• Security – to protect PII from unauthorized disclosure
• Enforcement – of applicable privacy policies and obligations