How does the policy define “sensitive information”?
Sensitive information is defined as any data that, if disclosed, could cause harm to individuals or the organization, including PHI, PII, and confidential business information.