Sometimes it's just the context
In cases like this one it's not just WHAT it says that is sensitive but the fact that you are in the database at all - which may infer an association. So just basic identity information name address etc. would be highly sensitive as it may imply a gang association. So "green" listing people is just as bad. Approaches such as saying oh I will encrypt the sensitive fields doesn't cut it.
Same in healthcare - if your name is in the database for adult mental healthcare and addictions for whatever minor or past reason just the identity management database is serious stuff.
Biting the hand that feeds IT
