Names, emails, phone numbers, and government IDs are obvious PII; unique writing style, rare itineraries, or stable join keys can still re-identify someone after those fields are stripped. AI training corpora often claim to exclude PII via deidentification, which is a process with residual risk rather than a binary property of a dump.