Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sensitive-information: Add inferred restricted sensitive information #27

Open
JoGSal opened this issue Mar 26, 2020 · 1 comment
Open

Comments

@JoGSal
Copy link

JoGSal commented Mar 26, 2020

Not sure about the meaning of "the sensitivity of all kinds of information" but, unless redundant, could "inferring restricted sensitive information from cross-referencing not restricted sensitive information" be mentioned?
Like the "minority inferred by language preferences" example in Sensitive information disclosure, a disability status could also be inferred by bits of information that are not restricted sensitive information on their own.

@jyasskin
Copy link
Member

"There is not consensus about the sensitivity of all kinds of information", in context, means that, while there is consensus that some kinds of information are sensitive, and consensus that some kinds are not, there are also some kinds for which there isn't consensus.

Generally, if it's possible to confidently infer sensitive information from a set of other information, that makes the concurrent disclosure of all of that other information also sensitive. I think it does make sense for this document to say something about how confident that inference needs to be, but I'm not sure what it should say.

Could you send a pull request with the wording change you're thinking of?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants