What is Sensitive Data? | UpGuard

This is a general guidance and marketing document about sensitive data and data protection: it defines categories of sensitive and personal data (PII, PHI, cardholder data, education and personnel records), outlines regulatory obligations (GDPR, HIPAA, FERPA, GLBA, state breach laws), explains how to measure sensitivity using the confidentiality, integrity, and availability (CIA) triad, lists common countermeasures for each CIA pillar, and recommends data classification and third‑party/vendor risk management; it concludes by positioning UpGuard as a provider of monitoring and compliance services.