PII

PII (Personally Identifiable Information) is data that can be used to identify a specific individual, alone or in combination with other data. Under Kenya's Data Protection Act, processing PII triggers a host of obligations.

Common PII categories:

• Direct identifiers: name, ID number, KRA PIN, passport number, email, phone, photograph
• Indirect identifiers: physical address, date of birth, biometrics, employee number
• Quasi-identifiers: combinations that can identify (e.g., gender + DOB + employer)
• Special categories (extra protection): health data, religious belief, ethnic origin, sexual orientation, financial details, criminal record

Papyrus's PII detection runs as part of the AI pipeline — identifying documents containing PII and recommending classification adjustments. PII-containing documents are typically classified Confidential or Restricted by default.

See also

• Data Subject Access Request
• Data Classification
• Redaction