Personally Identifiable Information (PII) is any data that can be used to identify a specific individual, either alone or when combined with other relevant information. This includes direct identifiers like full names, Social Security numbers, passport numbers, or driver's license numbers, which can uniquely identify a person. It also includes indirect or quasi-identifiers such as date of birth, race, gender, or ZIP code, which when combined can also identify someone

. PII encompasses a broad range of information including but not limited to:

• Full name
• Social Security number (SSN)
• Date and place of birth
• Passport information
• Driver’s license number
• Financial information
• Medical records
• Mailing address
• Biometric data (e.g., fingerprints)
• Mother's maiden name

There are two main categories of PII:

• Sensitive PII: Information that, if lost or disclosed without authorization, could cause substantial harm, embarrassment, or inconvenience to an individual, such as SSN, medical records, or financial data. This requires stricter handling and protection

• Non-sensitive PII: Information that poses a lower risk if disclosed, such as work email addresses or usernames, but still identifies an individual

PII is critical in privacy and security contexts because its unauthorized access or misuse can lead to identity theft, fraud, or other harms. Organizations collect and use PII to tailor services but must also protect it against cyber threats and breaches

. In summary, PII is any information that can distinguish or trace an individual's identity, directly or indirectly, and requires appropriate protection depending on its sensitivity