A birthday is personally identifiable information. Specifically, it’s a Sensitive PII that may be able to cause harm to a person if it's lost or disclosed.