Personally identifiable information, as defined in OMB Memorandum M-07-16 refers to "information that can be used to distinguish or trace an individual's identity, either alone or when combined with other personal or identifying information that is linked or associated with a specific individual." The definition of PII is not anchored to any single category of information or technology. Rather, it requires a case-by-case assessment of the specific risk that an individual can be identified.

 

It is crucial that NCHS staff, contractors, and agents understand and use the term PII consistent with OMB's definition.