I'll jump in with a short example here.
There are circumstances in which pieces of information, such as purchase data, might not necessarily be considered sensitive in a given context but might in another context—for example, an individual purchasing food items or health products that could relate to a medical diagnosis. In other words, the inferred information that can be captured, based on something that on the face of it seems to be pretty innocuous, could in fact be quite sensitive data. That's why it's so important to maintain this contextual awareness element in the bill and in the way it's interpreted and then applied by the OPC.