Data that could potentially identify a specific individual, or information that can be used to distinguish one person from another and can be used for de-anonymizing anonymous data can be considered PII.