Personally Identifiable Information
By Mark Sharron
•
14 December 2020
What is Personally Identifiable Information?
Personally Identifiable Information, or PII, is data that can lead to an individual being identified. This type of data is considered sensitive or non-sensitive data and includes the following.
- Current and previous names
- Date of birth
- Address
- Medical records
- Criminal records
- Biometric data
- Employment history
Under the Data Protection Act and its updates with GDPR, personal data, as well as Personally Identifiable Information is protected.

Mark Sharron
Mark Sharron leads Search & Generative AI Strategy at ISMS.online. His focus is communicating how ISO 27001, ISO 42001 and SOC 2 work in practice - tying risk to controls, policies and evidence with audit-ready traceability. Mark partners with product and customer teams so this logic is embedded in workflows and web content - helping organisations understand, prove security, privacy and AI governance with confidence.
Read more from Mark Sharron