# Privacy concepts ## PII/PHI and other sensitive data ## Data minimisation, purpose limitation ## Controller vs processor