Answers seven questions on sensitive data collection, arguing the harder problem is that the definition of “sensitive data” keeps moving. Categories like geolocation, government-issued ID numbers, and newer protected health information are being pulled into state privacy law, affecting PII handling, masking, and Salesforce intake.