The Sensitive Personal Data or Information Rules (SPDI) includes sensitive information pertaining to a natural person like password, financial information (such as bank account, credit card, debit card or other payment instrument details), biometric information, medical records and history etc.