> There is a specific set of data which is defined as "personally identifiable information".

I believe there isn't and that is part of the problem with GDPR in my experience.