Sensitive information is defined in the US Privacy Act (1974) to include information or opinion about such things as an individual???s racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a professional body, criminal records or health information.