Certified Information Privacy Professional/United States (CIPP/US) Practice Test

Sensitive Personal Information (SPI) typically refers to types of information that require a higher level of protection due to the potential harm or distress that could follow from unauthorized access, misuse, or disclosure. Information related to an individual's medical or financial status falls under SPI because it can reveal deeply personal aspects of a person's life. Such data can lead to identity theft, discrimination, or other significant negative consequences if compromised.

In contrast, general contact details, business-related data, and publicly available social media profiles do not carry the same level of sensitivity. While these types of information can be important and relevant for various purposes, they do not possess the intimate nature or potential for harm associated with sensitive personal information regarding health or financial matters. Therefore, option B, which identifies medical and financial status as SPI, accurately reflects the requirements for categorizing such information under protective measures in privacy regulations.