Personally identifiable information




"Private information" redirects here. For the 1952 British film, see Private Information.









Joseph reveals his true identity to his brothers


Personal information, described in United States legal fields as either personally identifiable information (PII), or sensitive personal information (SPI),[1][2][3] as used in information security and privacy laws, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. The abbreviation PII is widely accepted in the U.S. context, but the phrase it abbreviates has four common variants based on personal / personally, and identifiable / identifying. Not all are equivalent, and for legal purposes the effective definitions vary depending on the jurisdiction and the purposes for which the term is being used. [a]


Under European and other data protection regimes, which centre primarily around the General Data Protection Regulation, the term "personal data" is significantly broader, and determines the scope of the regulatory regime.[4]


National Institute of Standards and Technology Special Publication 800-122[5] defines PII as "any information about an individual maintained by an agency, including (1) any information that can be used to distinguish or trace an individual's identity, such as name, social security number, date and place of birth, mother's maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information." So, for example, a user's IP address is not classed as PII on its own, but is classified as linked PII.[6] However in Europe, a user's IP address IS classed as PII.[7]


The concept of PII has become prevalent as information technology and the Internet have made it easier to collect PII leading to a profitable market in collecting and reselling PII. PII can also be exploited by criminals to stalk or steal the identity of a person, or to aid in the planning of criminal acts. As a response to these threats, many website privacy policies specifically address the gathering of PII,[citation needed] and lawmakers[who?] have enacted a series of legislation[which?] to limit the distribution and accessibility of PII.[citation needed]


PII is a legal concept, not a technical concept, and it is not utilised in all jurisdictions. Because of the versatility and power of modern re-identification algorithms,[8][9][10] the absence of PII data does not mean that the remaining data does not identify individuals. While some attributes may not be uniquely identifying on their own, any attribute can be potentially identifying in combination with others.[11][12] These attributes have been referred to as quasi-identifiers or pseudo-identifiers.[13][14] While such data may not constitute PII in the United States, it is highly likely to remain personal data under European data protection law.[4]




Contents






  • 1 NIST definition


  • 2 In privacy law


    • 2.1 Australia


    • 2.2 Canada


    • 2.3 European Union


      • 2.3.1 United Kingdom




    • 2.4 New Zealand


    • 2.5 Switzerland


    • 2.6 United States


      • 2.6.1 State laws and significant court rulings


      • 2.6.2 Federal law






  • 3 Forensics


  • 4 Personal safety


  • 5 See also


  • 6 Notes


  • 7 References


  • 8 External links





NIST definition


The following data, often used for the express purpose of distinguishing individual identity, clearly classify as PII under the definition used by the National Institute of Standards and Technology (described in detail below):[15]




  • Full name (if not common)


  • Face (sometimes)

  • Home address

  • Email address


  • National identification number (e.g., Social Security number in the U.S.)


  • Passport number


  • Vehicle registration plate number


  • Driver's license number


  • Face, fingerprints, or handwriting

  • Credit card numbers

  • Digital identity

  • Date of birth

  • Birthplace

  • Genetic information

  • Telephone number


  • Login name, screen name, nickname, or handle


The following are less often used to distinguish individual identity, because they are traits shared by many people.
However, they are potentially PII, because they may be combined with other personal information to identify an individual.



  • First or last name, if common

  • Country, state, postcode or city of residence

  • Age, especially if non-specific


  • Gender or race

  • Name of the school they attend or workplace

  • Grades, salary, or job position

  • Criminal record


  • Web cookie[16]


When a person wishes to remain anonymous, descriptions of them will often employ several of the above, such as "a 34-year-old white male who works at Target". Note that information can still be private, in the sense that a person may not wish for it to become publicly known, without being personally identifiable. Moreover, sometimes multiple pieces of information, none sufficient by itself to uniquely identify an individual, may uniquely identify a person when combined; this is one reason that multiple pieces of evidence are usually presented at criminal trials. It has been shown that, in 1990, 87% of the population of the United States could be uniquely identified by gender, ZIP code, and full date of birth.[17]


In hacker and Internet slang, the practice of finding and releasing such information is called "doxing".[18][19] It is sometimes used to deter collaboration with law enforcement.[20] On occasion, the doxing can trigger an arrest, particularly if law enforcement agencies suspect that the "doxed" individual may panic and disappear.[21]



In privacy law


The U.S. government used the term "personally identifiable" in 2007 in a memorandum from the Executive Office of the President, Office of Management and Budget (OMB),[22] and that usage now appears in US standards such as the NIST Guide to Protecting the Confidentiality of Personally Identifiable Information (SP 800-122).[15] The OMB memorandum defines PII as follows:







A term similar to PII, "personal data" is defined in EU directive 95/46/EC, for the purposes of the directive:[23]







However, in the EU rules, there has been a clearer notion that the data subject can potentially be identified through additional processing of other attributes—quasi- or pseudo-identifiers. In the GDPR Personal Data is defined as:


Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person[24]


Another term similar to PII, "personal information" is defined in a section of the California data breach notification law, SB1386:[25]







The concept of information combination given in the SB1386 definition is key to correctly distinguishing PII, as defined by OMB, from "personal information", as defined by SB1386. Information, such as a name, that lacks context cannot be said to be SB1386 "personal information", but it must be said to be PII as defined by OMB. For example, the name John Smith has no meaning in the current context and is therefore not SB1386 "personal information", but it is PII. A Social Security Number (SSN) without a name or some other associated identity or context information is not SB1386 "personal information", but it is PII. For example, the SSN 078-05-1120 by itself is PII, but it is not SB1386 "personal information". However the combination of a valid name with the correct SSN is SB1386 "personal information".[25]


The combination of a name with a context may also be considered PII; for example, if a person's name is on a list of patients for an HIV clinic. However, it is not necessary for the name to be combined with a context in order for it to be PII. The reason for this distinction is that bits of information such as names, although they may not be sufficient by themselves to make an identification, may later be combined with other information to identify persons and expose them to harm.


According to the OMB, it is not always the case that PII is "sensitive", and context may be taken into account in deciding whether certain PII is or is not sensitive.[22][full citation needed]



Australia


In Australia, the Privacy Act 1988 deals with the protection of individual privacy, using the OECD Privacy Principles from the 1980s to set up a broad, principles-based regulatory model (unlike in the US, where coverage is generally not based on broad principles but on specific technologies, business practices or data items). Section 6 has the relevant definition.[26] The critical detail is that the definition of 'personal information' also applies to where the individual can be indirectly identified:


.mw-parser-output .templatequote{overflow:hidden;margin:1em 0;padding:0 40px}.mw-parser-output .templatequote .templatequotecite{line-height:1.5em;text-align:left;padding-left:1.6em;margin-top:0}

"personal information" means information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion. [emphasis added]


This raises the question of reasonableness: assume it is theoretically possible to identify a person from core information which say does NOT include a simple name and address, but does contain clues which could be pursued to ascertain who it relates to. Just how much extra effort or difficulty would such a step need before we could clearly say that the identity could NOT be "reasonably ascertained" from it?



For instance, if the information involves an IP address, and the relevant ISP stores logs which could easily be inspected (if you had sufficient legal justification) to re-link the IP address to the account holder, can their identity be "reasonably ascertained"? If such linking used to be expensive, slow and difficult, but becomes easier, does this change the answer at some point?


It appears that this definition is significantly broader than the Californian example given above, and thus that Australian privacy law, while in some respects weakly enforced, may cover a broader category of data and information than in some US law.
In particular, online behavioral advertising businesses based in the US but surreptitiously collecting information from people in other countries in the form of cookies, bugs, trackers and the like may find that their preference to avoid the implications of wanting to build a psychographic profile of a particular person using the rubric of 'we don't collect personal information' may find that this does not make sense under a broader definition like that in the Australian Privacy Act.



Canada




  • Privacy Act governs the Federal Government agencies


  • Ontario Freedom of Information and Protection of Privacy Act and similar Provincial legislation governs Provincial Government agencies.


  • Personal Information Protection and Electronic Documents Act governs private corporations, unless there is equivalent Provincial legislation


  • Ontario Personal Health Information Protection Act and other similar Provincial legislation governs health information



European Union


European data protection law does not utilize the concept of PII, and its scope is instead determined by non-synonymous, wider concept of "personal data".



  • Article 8 of the European Convention on Human Rights

  • The General Data Protection Regulation adopted in April 2016. Effective 25 May 2018
    • supersedes the Data Protection Directive - 95/46/EC


  • Directive 2002/58/EC (the E-Privacy Directive)

  • Directive 2006/24/EC Article 5 (The Data Retention Directive)


Further examples can be found on the EU privacy website.[27]



United Kingdom



  • The UK (Data Protection Act 2018)[28]

  • The UK Data Protection Act 1998 - superseded by the UK Data Protection Act 2018


  • General Data Protection Regulation (Europe, 2016)

  • Article 8 of the European Convention on Human Rights

  • The UK Regulation of Investigatory Powers Act 2000

  • Employers' Data Protection Code of Practice

  • Model Contracts for Data Exports

  • The Privacy and Electronic Communications (EC Directive) Regulations 2003

  • The UK Interception of Communications (Lawful Business Practice) Regulations 2000

  • The UK Anti-Terrorism, Crime and Security Act 2001



New Zealand


The twelve Information Privacy Principles of the Privacy Act 1993 apply.



Switzerland


The Federal Act on Data Protection of 19 June 1992 (in force since 1993) has set up a strict protection of privacy by prohibiting virtually any processing of personal data which is not expressly authorized by the data subjects.[29] The protection is subject to the authority of the Federal Data Protection and Information Commissioner.[29]


Additionally, any person may ask in writing a company (managing data files) the correction or deletion of any personal data.[30] The company must respond within thirty days.[30]



United States


The Privacy Act of 1974 (Pub.L. 93–579, 88 Stat. 1896, enacted December 31, 1974, 5 U.S.C. § 552a), a United States federal law, establishes a Code of Fair Information Practice that governs the collection, maintenance, use, and dissemination of personally identifiable information about individuals that is maintained in systems of records by federal agencies.


One of the primary focuses of the Health Insurance Portability and Accountability Act (HIPAA), is to protect a patient's Protected Health Information (PHI), which is similar to PII. The U.S. Senate proposed the Privacy Act of 2005, which attempted to strictly limit the display, purchase, or sale of PII without the person's consent. Similarly, the (proposed) Anti-Phishing Act of 2005 attempted to prevent the acquiring of PII through phishing.


U.S. lawmakers have paid special attention to the social security number because it can be easily used to commit identity theft. The (proposed) Social Security Number Protection Act of 2005 and (proposed) Identity Theft Prevention Act of 2005 each sought to limit the distribution of an individual's social security number.



State laws and significant court rulings



  • California

    • The California state constitution declares privacy an inalienable right in Article 1, Section 1.

    • California Online Privacy Protection Act (OPPA) of 2003


    • SB 1386 requires organizations to notify individuals when PII is known or believed to be acquired by an unauthorized person.

    • In 2011, the California State Supreme Court ruled that a person's ZIP code is PII.[31]



  • Nevada
    • Nevada Revised Statutes 603A-Security of Personal Information


  • Massachusetts


    • 201 CMR 17.00: Standards for The Protection of Personal Information of Residents of the Commonwealth[32]

    • In 2013, the Massachusetts Supreme Court ruled that ZIP codes are PII.[33]





Federal law



  • Title 18 of the United States Code, section 1028d(7)

  • The Privacy Act of 1974, codified at 5 U.S.C. § 552a et seq.


  • US "Privacy Shield" Rules (EU Harmonisation)



Forensics


In forensics, particularly the identification and prosecution of criminals, personally identifiable information is critical in establishing evidence in criminal procedure. Criminals may go to great trouble to avoid leaving any PII,[citation needed] such as by:



  • wearing masks, sunglasses, or clothing to obscure or completely hide distinguishing features, such as eye, skin, and hair colour, facial features, and personal marks such as tattoos, birthmarks, moles and scars.

  • wearing gloves to conceal fingerprints, which themselves are PII. However, gloves can also leave prints that are just as unique as human fingerprints. After collecting glove prints, law enforcement can then match them to gloves that they have collected as evidence.[34] In many jurisdictions the act of wearing gloves itself while committing a crime can be prosecuted as an inchoate offense.[35]

  • avoiding writing anything in their own handwriting.[citation needed]

  • masking their internet presence with methods such as using a proxy server to appear to be connecting from an IP address unassociated with oneself.



Personal safety


In some professions, it is dangerous for a person's identity to become known, because this information might be exploited violently by their enemies; for example, their enemies might hunt them down or kidnap loved ones to force them to cooperate. For this reason, the United States Department of Defense (DoD) has strict policies controlling release of PII of DoD personnel.[36] Many intelligence agencies have similar policies, sometimes to the point where employees do not disclose to their friends that they work for the agency.


Similar identity protection concerns exist for witness protection programs, women's shelters, and victims of domestic violence and other threats.[citation needed]



See also



  • Anonymity

  • Bundesdatenschutzgesetz

  • De-identification

  • Personal identifier

  • Personal identity

  • Personal Information Agent

  • Protected health information

  • Pseudonymity

  • Privacy

  • Privacy law

  • Privacy laws of the United States

  • Obfuscation

  • Surveillance

  • General Data Protection Regulation



Notes





  1. ^ In other countries with privacy protection laws derived from the OECD privacy principles, the term used is more often "personal information", which may be somewhat broader: in Australia's Privacy Act 1988 (Cth) "personal information" also includes information from which the person's identity is "reasonably ascertainable", potentially covering some information not covered by PII.




References





  1. ^ "Management of Data Breaches Involving Sensitive Personal Information (SPI)". Va.gov. Washington, DC: Department OF Veterans Affairs. 6 January 2012. Archived from the original on 26 May 2015. Retrieved 25 May 2015..mw-parser-output cite.citation{font-style:inherit}.mw-parser-output .citation q{quotes:"""""""'""'"}.mw-parser-output .citation .cs1-lock-free a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/6/65/Lock-green.svg/9px-Lock-green.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output .citation .cs1-lock-limited a,.mw-parser-output .citation .cs1-lock-registration a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/d/d6/Lock-gray-alt-2.svg/9px-Lock-gray-alt-2.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output .citation .cs1-lock-subscription a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/a/aa/Lock-red-alt-2.svg/9px-Lock-red-alt-2.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output .cs1-subscription,.mw-parser-output .cs1-registration{color:#555}.mw-parser-output .cs1-subscription span,.mw-parser-output .cs1-registration span{border-bottom:1px dotted;cursor:help}.mw-parser-output .cs1-ws-icon a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/4/4c/Wikisource-logo.svg/12px-Wikisource-logo.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output code.cs1-code{color:inherit;background:inherit;border:inherit;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;font-size:100%}.mw-parser-output .cs1-visible-error{font-size:100%}.mw-parser-output .cs1-maint{display:none;color:#33aa33;margin-left:0.3em}.mw-parser-output .cs1-subscription,.mw-parser-output .cs1-registration,.mw-parser-output .cs1-format{font-size:95%}.mw-parser-output .cs1-kern-left,.mw-parser-output .cs1-kern-wl-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right,.mw-parser-output .cs1-kern-wl-right{padding-right:0.2em}


  2. ^ Stevens, Gina (April 10, 2012). "Data Security Breach Notification Laws" (PDF). fas.org. Retrieved Jun 8, 2017.


  3. ^ Greene, Sari Stern (2014). Security Program and Policies: Principles and Practices. Indianapolis, IN, US: Pearson IT Certification. p. 349. ISBN 9780789751676. OCLC 897789345.


  4. ^ ab Schwartz, Paul M; Solove, Daniel (2014). "Reconciling Personal Information in the United States and European Union". California Law Review. 102 (4). doi:10.15779/Z38Z814.


  5. ^ "NIST Special Publication 800-122" (PDF). nist.gov.
     This article incorporates public domain material from the National Institute of Standards and Technology website https://www.nist.gov.


  6. ^ Section 3.3.3 “Identifiability”


  7. ^ "ECJ rules IP Address is PII". Enterprise Times. October 20, 2016. Retrieved January 29, 2019.


  8. ^ de Montjoye, Yves-Alexandre; César A. Hidalgo; Michel Verleysen; Vincent D. Blondel (March 25, 2013). "Unique in the Crowd: The privacy bounds of human mobility". Scientific Reports. 3: 1376. doi:10.1038/srep01376. PMC 3607247. PMID 23524645.


  9. ^ Narayanan, A.; Shmatikov, V. (2008). "Robust De-anonymization of Large Sparse Datasets". 2008 IEEE Symposium on Security and Privacy (sp 2008). p. 111. doi:10.1109/SP.2008.33. ISBN 978-0-7695-3168-7.


  10. ^ Narayanan, A.; Shmatikov, V. (2009). "De-anonymizing Social Networks". 2009 30th IEEE Symposium on Security and Privacy. p. 173. arXiv:0903.3276. doi:10.1109/SP.2009.22. ISBN 978-0-7695-3633-0.


  11. ^ Narayanan, A.; Shmatikov, V. (2010). "Myths and fallacies of "personally identifiable information"". Communications of the ACM. 53 (6): 24. doi:10.1145/1743546.1743558.


  12. ^
    "Broken Promises of Privacy: Responding to the Surprising Failure of Anonymization". 2009-08-13. SSRN 1450006. Missing or empty |url= (help)


  13. ^ Delanius, Tore (1986). "Finding a needle in a haystack – or identifying anonymous census record". Journal of Official Statistics.


  14. ^ Opinion 05/2014 on Anonymisation Techniques Article 29 Data Protection Working Party


  15. ^ ab "Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)" (PDF). Special Publication 800-122. NIST.


  16. ^ "Anonymity and PII". cookieresearch.com. Retrieved 6 May 2015.


  17. ^ "Comments of Latanya Sweeney, Ph.D. on "Standards of Privacy of Individually Identifiable Health Information"". Carnegie Mellon University. Archived from the original on 2009-03-28.


  18. ^ James Wray and Ulf Stabe (2011-12-19). "The FBI's warning about doxing was too little too late". Thetechherald.com. Retrieved 2012-10-23.


  19. ^ "Anonymous's Operation Hiroshima: Inside the Doxing Coup the Media Ignored (VIDEO)". Ibtimes.com. 2012-01-01. Retrieved 2012-10-23.


  20. ^ "Did LulzSec Trick Police Into Arresting the Wrong Guy? - Technology". The Atlantic Wire. 2011-07-28. Retrieved 2012-10-23.


  21. ^ Bright, Peter (2012-03-07). "Doxed: how Sabu was outed by former Anons long before his arrest". Ars Technica. Retrieved 2012-10-23.


  22. ^ ab M-07-16 SUBJECT:Safeguarding Against and Responding to the Breach of Personally Identifiable Information FROM: Clay Johnson III, Deputy Director for Management (2007/05/22)


  23. ^ "Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data". Eur-lex.europa.eu. Retrieved 2013-08-20.


  24. ^ "What is personal data?". TrueVault.


  25. ^ ab "Text of California Senate Bill SB 1386 ref paragraph SEC. 2 1798.29.(e)". California.


  26. ^ "Privacy Act 1988". Retrieved 14 October 2012.


  27. ^ "Data protection". European Commission - European Commission. 2017-04-11.


  28. ^ Data Protection Act 2018 Published by legislation.gov.uk, retrieved 14 August 2018


  29. ^ ab Federal Act on Data Protection of 19 June 1992 (status as of 1 January 2014), Federal Chancellery of Switzerland (page visited on 18 September 2016).


  30. ^ ab (in French) Cesla Amarelle, Droit suisse, Éditions Loisirs et pédagogie, 2008.


  31. ^ "California Supreme Court Holds that Zip Code is Personal Identification Information - Bullivant Houser Bailey Business Matters eAlert". LexisNexis.


  32. ^ "201 CMR 17.00: Standards for The Protection of Personal Information of Residents of the Commonwealth" (PDF). Commonwealth of Massachusetts.


  33. ^ Tyler v. Michaels Stores, Inc., 984N.E.2d 737, 739 (2013)


  34. ^ Sawer, Patrick (2008-12-13). "Police use glove prints to catch criminals". Telegraph.co.uk. Retrieved 2013-08-20.


  35. ^ James W.H. McCord and Sandra L. McCord, Criminal Law and Procedure for the paralegal: a systems approach, supra, p. 127.


  36. ^ "MEMORANDUM FOR DOD FOIA OFFICES" (PDF). United States Department of Defense. Archived from the original (PDF) on 29 June 2011.




External links




  • Six things you need to know about the new EU privacy framework A legal analysis of the new European regulatory framework about data privacy

  • Personal and professional information management


  • Power to the People! Giving Citizens their Personal Data Rights Back - J Cromack

  • Rethinking Personal Data New Lens Report - World Economic Forum

  • Why Consent is Different to Marketing Preferences - K Dewar










-

Popular posts from this blog

Bressuire

Image
Subprefecture and commune in Nouvelle-Aquitaine, France Bressuire Subprefecture and commune Chateau de Bressuire and the Eglise Notre-Dame Coat of arms Location of Bressuire Bressuire Show map of France Bressuire Show map of Nouvelle-Aquitaine Coordinates: 46°50′27″N 0°29′14″W  /  46.8408°N 0.4872°W  / 46.8408; -0.4872 Coordinates: 46°50′27″N 0°29′14″W  /  46.8408°N 0.4872°W  / 46.8408; -0.4872 Country France Region Nouvelle-Aquitaine Department Deux-Sèvres Arrondissement Bressuire Canton Bressuire Government  • Mayor .mw-parser-output .nobold{font-weight:normal} (2014–20) Jean Michel Bernier Area 1 180.59 km 2 (69.73 sq mi) Population (2014) 2 19,300  • Density 110/km 2 (280/sq mi) Time zone UTC+01:00 (CET)  • Summer (DST) UTC+02:00 (CEST) INSEE/Postal code 79049 /79300 Elevation 98–236 m (322–774 ft) (avg. 173 m or 568 ft) 1 French Land Register data, which exclude...
Read more

Vorschmack

Image
Vorschmack Ukrainian Jewish-style vorschmack served on rye bread Course Hors d'oeuvre Region or state Eastern Europe Associated national cuisine Ashkenazi Jewish, Finnish, German, Ukrainian, Polish, Russian Main ingredients Ground meat and/or fish Cookbook: Vorschmack   Media: Vorschmack Vorschmack or forshmak (Yiddish: פֿאָרשמאַק ‎, from archaic German Vorschmack , "foretaste" [1] or "appetizer" [2] ) is an originally East European dish made of salty minced fish or meat. Different variants of this dish are especially common in Ashkenazi Jewish and Finnish cuisine. Some varieties are also known in Russian and Polish cuisine. Contents 1 In Jewish cuisine 2 In Russian cuisine 3 In Polish cuisine 4 In Finnish cuisine 5 See also 6 References In Jewish cuisine According to Gil Marks, the German name points to the possible Germanic origin of this dish. [1] William Pokhlyobkin descr...
Read more

Quarantine

Image
For other uses, see Quarantine (disambiguation). Signal flag "Lima" called the "Yellow Jack" which when flown in harbor means ship is under quarantine. A simple yellow flag (also called the "Yellow Jack") had historically been used to signal quarantine (it stands for Q among signal flags), but now indicates the opposite, as a signal of a ship free of disease that requests boarding and inspection. A quarantine is used to separate and restrict the movement of people; it is 'a restraint upon the activities or communication of persons or the transport of goods designed to prevent the spread of disease or pests', for a certain period of time. [1] This is often used in connection to disease and illness, such as those who may possibly have been exposed to a communicable disease. [2] The term is often erroneously used to mean medical isolation, which is "to separate ill persons who have a communicable disease from those who are healthy...
Read more