Read the Latest From Limina

Privacy Enhancing Data De-Identification Framework - ISO/IEC 27559:2022(E)

What is PHI?

PHI, or Protected Health Information, is a term with a surprisingly wide scope. This article breaks down how HIPAA defines it, how the GDPR and Ontario's PHIPA compare, and why understanding the boundaries of PHI is essential for any organization that handles health data.

Introducing PrivateGPT: A Private AI solution

GDPR in Germany: Challenges of German Data Privacy

Quebec Law25 – Scope: Personal Information of Service Providers

Direct and Indirect Personal Identifiers: What are they?

What Is Sensitive Information?

Not all personal data carries the same risk. This guide breaks down what sensitive information actually means under major privacy frameworks, why context is everything, and what businesses need to do to protect it.

What Are PII, PCI, and PHI? A Plain-English Compliance Guide

Personally Identifiable Information (PII) is any data that can identify a specific person—a name, email address, or Social Security number, for example. Protected Health Information (PHI) is a subcategory of PII that specifically covers individually identifiable health data regulated under HIPAA. Payment Card Industry (PCI) data is another subcategory covering cardholder and payment authentication information governed by the PCI Data Security Standard.

The True Cost of a Data Breach: By Region, Industry, and What You Can Do About It

Data breaches cost organizations an average of $4.35 million per incident. Learn what drives that number up -- and what brings it down.

Structured, Semi-Structured, and Unstructured Data: What’s the Difference and What Challenges Do They Pose for Data Processing and Protection?

Private AI and Mila Announce Partnership to Elevate Data Privacy Research

Private AI Named to Guidewire Insurtech Vanguards Program

Addressing Privacy and the GDPR in ChatGPT and Large Language Models

Why The Right To Be Forgotten Is Even Harder To Comply With Than You Think (And What To Do About It)

The right to be forgotten sounds straightforward until you try to actually do it. This article breaks down why erasing a single individual's personal data is technically and operationally complex, and what organizations can do to get ahead of the problem before a deletion request lands in their inbox.

The Data Conundrum: Navigating Healthcare Privacy Legislation in Canada

Canada's healthcare privacy legislation spans federal, provincial, and territorial levels — and it's not always consistent. This guide breaks down what regulated organizations need to know about de-identification, data minimization, and third-party data sharing under PIPEDA, the proposed CPPA, PHIPA, and Quebec's Bill 64.