My bad, it’s not about sensitive information at all. It’s about any user data that can be used to identify the person. For example an email address may belong to anyone, or two people can have the exact same name; but using the two together you might much more easily pinpoint a person. I don’t know if you call this personal data, private data or just user data. It’s not about sensitive data though.