Appropriation harms occur when someone's personal information is used without their consent,
often for malicious purposes. An unauthorized individual obtaining access to personal information
and using it for medical fraud is a clear example of appropriation harm because it involves the
misuse of someone's personal data for fraudulent activities, potentially causing significant financial
and personal damage to the victim. The IAPP emphasizes that appropriation harms are serious
privacy violations that require stringent safeguards to protect individuals' personal data from
unauthorized use.