U.S. sensitive personal data — six sub-categories, each with 12-month “bulk” thresholds for transacting parties: covered personal identifiers (100,000 U.S. persons), precise geolocation data (1,000 ...