The definition of sensitive data is broad and may differ from one country to the other or from one organization to the other. Basically, sensitive data can be personal information or business information which includes anything that poses a risk to the person or company in question.
Globally, Credit/Debit card data for example is considered to be sensitive. Also an employee’s salary details any information that can be used to identify or locate a person can be considered to be sensitive data. A non-exhaustive list of personal sensitive data may include: first and last names, email addresses, addresses, Security Social Number (SSN), credit card numbers, bank account numbers, race, gender, date of birth, salary and geolocation combined with time.
For further information about personal sensitive data, check Personally Identifiable Information.
Also, business sensitive data may include trade secrets, acquisition plans, financial data and customer information, among other possibilities.