Skip to content
This repository has been archived by the owner on Nov 7, 2024. It is now read-only.

Sensitive-information: Add inferred restricted sensitive information #27

Open
JoGSal opened this issue Mar 26, 2020 · 1 comment
Open

Comments

@JoGSal
Copy link

JoGSal commented Mar 26, 2020

Not sure about the meaning of "the sensitivity of all kinds of information" but, unless redundant, could "inferring restricted sensitive information from cross-referencing not restricted sensitive information" be mentioned?
Like the "minority inferred by language preferences" example in Sensitive information disclosure, a disability status could also be inferred by bits of information that are not restricted sensitive information on their own.

@jyasskin
Copy link
Member

"There is not consensus about the sensitivity of all kinds of information", in context, means that, while there is consensus that some kinds of information are sensitive, and consensus that some kinds are not, there are also some kinds for which there isn't consensus.

Generally, if it's possible to confidently infer sensitive information from a set of other information, that makes the concurrent disclosure of all of that other information also sensitive. I think it does make sense for this document to say something about how confident that inference needs to be, but I'm not sure what it should say.

Could you send a pull request with the wording change you're thinking of?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants