Biometric data would constitute sensitive information as well. By and large, thinking about the contextual analysis, I would typically include that there.
If you look at Law 25 in Quebec, you will see a definition of sensitive information that I think can be very informative, so to my fellow witness's point, I think that is important.