Personally identifiable information, often shortened to PII, can include direct identifiers and information that makes someone identifiable when combined with other data. Customer records, payroll, recordings, online forms, and location data all deserve attention. The exact legal definition depends on the applicable law.
Look across the whole process
Map where information is collected, what it is used for, who receives it, and how long it is kept. Include outsourced services, integrations, and AI tools, not just the main business database.
Turn the map into decisions
Classify the information, review access, agree deletion rules, and determine the supplier arrangements required for each use. Give the work an owner. A current map helps the team answer a customer questionnaire with facts and makes it easier to spot a new use that needs review.