Sensitive information is a subset and includes health records, religious information, or data that could lead to economic or physical harm.In general, personal information can only be used for a list of purposes specified in the legislation, including processing transactions, certain types of marketing, reasonably expected uses, and responding to police and other governmental requests.