Any data that can be used to identify a specific individual, such as name, email address, or phone number. PII is subject to strict protections under privacy laws, so it is typically hashed or tokenized before being shared across systems.