Sensitive PII must be transmitted and stored in secure form, for example, using encryption, because it could cause harm to an individual, if disclosed.
Non-sensitive PII can be transmitted in unsecure form without causing harm to an individual. While PII has several formal definitions, generally speaking, it is information that can be used by organizations on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Personally Identifiable Information (PII) is a legal term pertaining to information security environments. What Is Personally Identifiable Information (PII)
