Concept dictionary
Sensitive Information
Sensitive information is information that could create privacy, safety, financial, legal, employment, security, reputational, or relational harm if it is exposed, combined, or misused.
What counts as sensitive depends on the people, setting, agreements, and consequences.
- Review state
- Reviewed in POC
- Freshness
- Current
- Version
- 2
Also called
- sensitive-information
Remember it this wayIf exposure could cause harm, pause before sharing.
In plain language
Information is sensitive when sharing, combining, or misusing it could expose someone, violate an agreement, create risk, or cause harm. The context and consequences matter as much as the label on the data.
Why it matters
Information that appears harmless by itself may become identifying or risky when combined with other details.
A learner should pause before sharing credentials, personal identifiers, health information, financial information, client or student records, workplace records, location details, or another person's private information.
Example
A real customer name, phone number, account complaint, and purchase history should not be pasted into a practice chatbot merely to improve a draft response.
Common misconception
Sensitive information is not limited to passwords or official secrets. Ordinary details can become sensitive because of who they concern, where they are shared, or what they reveal when combined.
Related terms
Sources
- NIST SP 800-122, "Guide to Protecting the Confidentiality of Personally Identifiable Information"identifying PII and matching safeguards to the potential impact of disclosure.
- NIST IR 8053, "De-Identification of Personal Information"privacy risk, data sharing, and the limits of removing identifying details.