Users of a web-based email service have their accounts breached through compromised login credentials.

Calo’s Harm Dimensions categorize privacy harms into two main types: objective and subjective harms.

Identity Theft (Objective Harm): This is a measurable harm that occurs when an individual's personal information is stolen and used fraudulently, leading to financial loss, legal consequences, or other tangible damages.

Embarrassment (Subjective Harm): This is a harm that affects an individual's feelings, emotions, or social standing. It occurs when personal information is exposed in a way that causes humiliation or distress.

These two examples illustrate the categories effectively:

Identity theft represents the objective harm.

Embarrassment represents the subjective harm.

References: IAPP Certification Textbooks, Section on Privacy Harms and Risk Assessment, Calo’s Harm Dimensions.