This may sound pedantic but PII is not even mentioned in the GDPR. It's a notion from U.S. law. The GDPR refers to "personal data". Everything you say above ab

This may sound pedantic but PII is not even mentioned in the GDPR. It's a notion from U.S. law. The GDPR refers to "personal data". Everything you say above about PII is true of personal data under GDPR.