Are you sure about your definition of sensitive information?
If you are thinking about the European Union’s GDPR, which was mentioned above, or legislation based on it, then it might be worth doing a quick internet search – as I vaguely recollect that it’s got to do with health data, religious or political beliefs etc rather than merely data that can identify a person.