Saglam, Rahime BelenNurse, Jason R. C.Hodges, Duncan2022-04-142022-04-142022-03-26Saglam RB, Nurse JRC, Hodges D. (2022) Personal information: perceptions, types and evolution, Journal of Information Security and Applications, Volume 66, May 2022, Article number 1031632214-212610.1016/j.jisa.2022.103163http://dspace.lib.cranfield.ac.uk/handle/1826/17772Advances in technology have made us as a society think more about cyber security and privacy, particularly how we consider and protect personal information. Such developments have introduced a temporal dimension to the definition of personal information and we have also witnessed new types of data emerging (e.g., phone sensor data, stress level measurements). These rapid technological changes introduce several challenges as legislation is often inadequate, and therefore questions regularly arise pertaining whether information should be considered personal or sensitive and thereby better protected. In this paper, therefore, we look to significantly advance research into this domain by investigating how personal information is regarded in governmental legislations/regulations, privacy policies of applications, and academic research articles. Through an assessment of how personal information has evolved and is perceived differently (e.g., in the context of sensitivity) across these key stakeholders, this work contributes to the understanding of the fundamental disconnects present and also the social implications of new technologies. Furthermore, we introduce a series of novel taxonomies of personal information which can significantly support and help guide how researchers and practitioners work with, or develop tools to protect, such information.enAttribution-NonCommercial-NoDerivatives 4.0 Internationalhttp://creativecommons.org/licenses/by-nc-nd/4.0/Personal informationInformation sensitivityData protectionRegulationsTaxonomyCyber securityArticle