Also, just so that everyone is aware…

“Personally identifiable information (PII) or sensitive personal information (SPI) as used in information security and privacy laws, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context.’ (Management of Data Breaches Involving Sensitive Personal Information (SPI) Va.gov Washington, DC: Department of Veterans Affairs, January 6, 2012) – Names, therefore, seem like a perfect place to start.