PII is any data that may identify and individual. For example, because an individual’s ethnic background can’t be considered as part of the recruitment process, it is illegal to deliberately data-mine an individual’s race. The same applies for sexuality, religion, age and gender. Something as “innocent” or “well-intentioned” as screening an applicant’s social media creates an uncertain grey area not worth treading. Tech IT recommends establishing clear and unequivocal business-wide ‘code of conduct’ rules for social media issues, which should even be applied after recruitment.