The District Judge described what she meant with the otherwise anodyne acronym "PII" and in the antiseptic-sounding phrase, "Personal Identification Information." Bear in mind, once again, that these are the things that were accessed by cyberattackers for 80 Million people in a health insurance carrier's database:
‘These records include personal information (such as names, dates of birth, Social Security numbers, health care ID numbers, home addresses, email addresses, and employment information, including income data) and individually-identifiable health information (pertaining to the individual claims process, medical history, diagnosis codes, payment and billing records, test records, dates of service, and all other health information that an insurance company has or needs to have to process claims).‘ Id. The Court shall refer to members' personal and health information as Personal Identification Information, or ‘PII.‘
In re Anthem, Inc. Data Breach Litigation, No. 15-MD-02617-LHK, 2016 WL 589760, at *2 (N.D. Cal. February 14, 2016 [and once again, yes, dated on a Sunday]).
To be continued.
Please Read The Disclaimer. ©2016 by Dennis J. Wall, author of "Insurance Claims and Issues" (forthcoming Thomson Reuters 2016). All rights reserved.