New answers tagged regulation
A password is not considered PII because it's not something that can be used to identify a person. By contrast, all the others you're listing can be used to do that. Also, notice there are different levels of PII. An email and phone number have a 1:1 relation with an identity, while a pair secret question-answer and a IP address might not be directly linked ...
Top 50 recent answers are included