Member

Personal or sensitive information is defined broadly enough to reflect modern methods of authentication, covering passwords, PINs, credit card numbers, national insurance numbers, biometric data and other unique identifiers, but it is tightly anchored to the intent to impersonate. The mere possession of data or ordinary lawful processing of personal information would not be captured, nor would legitimate investigative work by law enforcement or regulators acting with lawful authority.