CCPA broadly protects “personal information” and defines this as information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Sensitive personal information is a more specific category of personal information that can result in discrimination or harm if accessed. The CCPA does not include sensitive personal information as a subcategory, but the CPRA, which amends the CCPA, does include it.