Users of a web-based email service have their accounts breached through compromised login credentials. Which possible consequences of the breach…

Calo’s Harm Dimensions categorize privacy harms into two main types: objective and subjective

harms.

Identity Theft (Objective Harm): This is a measurable harm that occurs when an individual's personal

information is stolen and used fraudulently, leading to financial loss, legal consequences, or other

tangible damages.

Embarrassment (Subjective Harm): This is a harm that affects an individual's feelings, emotions, or

social standing. It occurs when personal information is exposed in a way that causes humiliation or

distress.

These two examples illustrate the categories effectively:

Identity theft represents the objective harm.

Embarrassment represents the subjective harm.

Reference: IAPP Certification Textbooks, Section on Privacy Harms and Risk Assessment, Calo’s Harm

Dimensions.