Privacy's Open source moment - Defining Industry wide Personal Identifiable Information (PII)

I spoke to 100 Privacy professionals and a common issue I discovered is the inability to define exhaustive list of Personal Identifiable Information (PII) in an unified manner in the Industry. Hence when companies onboard vendors, despite having advanced technologies and years of research in this field, the vendors don't serve the company's needs in a holistic manner, as there is no exhaustive list on what needs to be detected. A common theme, I have heard from Privacy Lawyers is that many regional specific laws have different definitions of what constitutes as personal data, hence probably a single definition doesn't exist. However, I do believe Privacy deserves an open source moment, a singular definition for legos of Privacy, and hence this is my attempt to start with defining it with the exhaustive list of Personal Identifiable Information.

Definition of Personal Identifiable Information (PII):

Identifying directly or indirectly, physical, physiological, genetic, mental, economic, cultural or social identity of the natural person, using online identifiers like name, identification number, IP address, location data etc. Traits like Person’s job, hair color, or political opinions could be classified as personal data.

Exhaustive List for Personal Data/PII:

• Name
• Email address.
• Phone number
• Home address.
• Date & Place of birth.
• Personal identification number
• Race
• Gender
• Age
• Sexual Orientation
• Religion
• Political opinions.
• Credit card numbers.
• Data held by a hospital or doctor.
• Photograph where an individual is identifiable.
• Identification card number.
• A cookie ID.
• Internet Protocol (IP) address
• Location data (for example, the location data from a mobile phone).
• The advertising identifier of your phone
• Business telephone number
• Education, medical, financial, employment information
• Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs;
• Trade-union membership;
• Genetic data, biometric data processed solely to identify a human being;
• Health-related data;
• Data concerning a person’s sex life or sensitive data.?

Personal data relating to Privacy Laws?does not cover:

• Information about someone who is deceased.
• Properly anonymized data.
• Information about public authorities and companies.

Would love to hear from the community on what else should be part of the PII list.