Myths and Fallacies of 'Personally Identifiable Information'. Narayanan, Arvind; Shmatikov, Vitaly. dl.acm.org . Jun 1, 2010. What is PII? From Breach Notification Laws: For example, California Senate Bill 1386: SSNs, driver’s license numbers, financial accounts.
The list can never be exhaustive, e.g. email addresses and telephone numbers are not mentioned in Bill 1386.
Focuses on data that are commonly used for authenticating an individual. Ignores data that reveals some sensitive information about an individual...