Sensitive information

“Sensitive information” is a general phrase that refers to any information that may harm individuals or organizations if it is exposed, accessed, or misused. It’s a broad term often used in conversational contexts such as business communications.

It’s often used interchangeably with “sensitive data”, but “sensitive information” is more colloquial.

For example, business negotiations about a merger might be referred to as sensitive information, but this usage is well outside the realm of data protection.

If you see “sensitive information” used in a way that implies protected personal data, it is likely referring to “sensitive personal information”, which is a category of protected data defined in the California Privacy Rights Act (CPRA).