Is there a technical definition of &quot;personally identifiable information&quot;? Would they be required to provide any guarantees on the properties of the released data to ensure that when other data is shared there&#x27;s no way to link them?