Personally identifiable information (PII) is widely used in regulatory law across industries to include SSN, DoB, bank account numbers, home address, etc... so

Personally identifiable information (PII) is widely used in regulatory law across industries to include SSN, DoB, bank account numbers, home address, etc... so I don't think that's an issue. They typically don't get so so specific to allow the regulators to use their reasonable judgement