The IT Law Wiki


Information in identifiable form is

any representation of information that permits the identity of an individual to whom the information applies to be reasonably inferred by either direct or indirect means.[1]Information "permitting the physical or online contacting of a specific individual"[2] is the same as "information in identifiable form."
information in an IT system or online collection: (i) that directly identifies an individual (e.g. name, address, social security number or other identifying number or code, telephone number, email address, etc.) or (ii) by which an agency intends to identify specific individuals in conjunction with other data elements, i.e., indirect identification. (These data elements may include a combination of gender, race, birth date, geographic indicator, and other descriptors).[3]


  1. E-Government Act of 2002, §208(d). This is synonymous with personally identifiable information.
  2. See id. §208(b)(1)(A)(ii)(II)).
  3. OMB Memorandum M-03-22. See also DOJ, Privacy Impact Assessments Official Guidance, at 6-7.

See also[]