Sensitive personal information,
Sensitive personal information, with respect to an individual, means any information about the individual maintained by an agency, including the following:
(1) Education, financial transactions, medical history, and criminal or employment history.
(2) Information that can be used to distinguish or trace the individual's identity, including name, Social Security number, date and place of birth, mother's maiden name, or biometric records.