Overview#Private data is data that is considered "private" by the Resource Owner's Data Classification
Data should be classified as Private data or Company Confidential when the unauthorized disclosure, alteration or destruction of that data could result in a moderate level of risk to the Entity or their affiliates.
A reasonable level of security controls should be applied to Private data.
- Personal data
- Personally Identifiable Information
- Patient Data
- any other data that is considered "private" by the Resource Owner's Data Classification