Enriched Experience of 300 Years

Three reasons that show up on the P&L.

Regulatory exposure. GDPR fines reach €20 million or 4% of global annual turnover, and violations of the data subject rights provisions sit in that top tier rather than the lower one.

Operational cost. Manual handling of access and deletion requests consumes legal and engineering time that scales linearly with request volume — and request volumes have risen every year for five consecutive years.

Commercial trust. Enterprise buyers, particularly in financial services and healthcare, now assess privacy posture during vendor selection. Weak controls cost deals, not just fines.

Personal data is any information relating to an identified or identifiable person — a name, email address, phone number, account number, IP address, device identifier or location record.

Under GDPR the test is whether a person can be singled out, directly or indirectly, from that information alone or combined with other data the organisation holds. That last clause is the one teams underestimate: fragments that look anonymous in isolation frequently become personal data once they can be joined to another table.

PII is the subset of personal data that identifies a specific individual, either on its own or in combination with other records — full name, Social Security number, driver's licence number, passport number, financial account numbers.

"PII" is the term used most often in US law and security standards; "personal data" is the broader European concept. Most enterprise privacy programmes end up protecting both, because the wider definition sets the compliance obligation while the narrower one concentrates the breach risk.

Sensitive data is information that could cause harm, discrimination or financial loss if exposed.

Most privacy regimes single out a defined set as special-category data: health and medical records, biometric and genetic data, racial or ethnic origin, religious belief, political opinion, trade union membership, sexual orientation, and precise geolocation. California adds a right to limit the use of sensitive personal information as a standalone consumer right.

Processing it generally requires a stronger legal basis than ordinary personal data, and the consequences of mishandling it are correspondingly higher.

They solve different problems and are not interchangeable.

Redaction permanently removes or obscures sensitive elements from a record so they cannot be recovered. Use it when data is leaving the organisation — disclosure, publication, DSAR responses, regulatory submissions.

Masking substitutes realistic but fictitious values that preserve the format and behaviour of the original, so applications and tests still function. Use it for non-production environments.

Anonymisation goes furthest, irreversibly removing any means of re-identification. Properly anonymised data generally falls outside the scope of privacy law altogether — but the bar is higher than most teams assume, and weakly anonymised datasets have repeatedly been re-identified.

Data Safeguard provides redaction through ID-REDACT^® and masking through ID-MASK^®.

Data discovery is the process of finding where personal and sensitive data actually lives — across databases, warehouses, data lakes, file shares and collaboration tools, including the copies nobody documented. Classification then labels what was found by type and sensitivity.

Everything else in a privacy programme depends on this step. You cannot honour a deletion request, scope a breach, complete an impact assessment or evidence compliance for data you cannot locate. In most enterprises the gap between the data inventory on paper and the data actually present is the single largest source of privacy risk.

Data Safeguard provides this as Confidential Data Discovery, one of the eight modules of ID-PRIVACY^®.

Structured data sits in defined rows and columns, typically in databases and warehouses. Semi-structured data carries tags or markers but no fixed schema — JSON, XML, log files. Unstructured data has no predefined model at all: documents, spreadsheets, presentations, PDFs, email bodies, chat transcripts.

The distinction matters commercially, not just technically. Most privacy tooling handles structured data well and unstructured data poorly — yet unstructured stores are typically where the majority of an enterprise's personal data actually sits. A discovery programme that only covers databases will report a clean bill of health while leaving the largest exposure untouched.

Data Safeguard's products are built to operate across all three.