What is PII, and what policies govern its collection, storage, and use in content projects?

• A. Personally Identifiable Information; policies govern collection, storage, use, retention, consent, and security controls.
• B. Publicly Indexed Information; policies govern access only.
• C. Personally Irrelevant Information; policies govern none.
• D. Privacy Information; policies govern marketing use only.

Answer: (A)

PII stands for Personally Identifiable Information—data that can identify a specific person, such as names, contact details, and other identifiers. In content projects, policies govern the full lifecycle of PII: how it is collected, stored securely, and used for legitimate purposes; how long it is retained and when it is deleted; how consent is obtained and whether it can be withdrawn; and what security controls protect it (encryption, access controls, audits, and breach response). These policies ensure privacy, help meet legal and regulatory requirements, and promote responsible data handling throughout the project's workflows.

Other options either redefine the term or narrowly limit policy scope (for example, focusing only on access) and therefore don’t capture the full set of protections that PII policies require.