Define PII Ontology
Then create an association of More General to More Specific between GDPR and PII:

Then, you may create terms for all the other concepts associated with PII, such as email Address, Address, US Social Security Number, etc.:

Create the associations of More General to More Specific between them. In the Semantic Mapping tab of the object page for GDPR we then have:
