Then create an association of More General to More Specific between GDPR and PII:
Then, you may create terms for all the other concepts associated with PII, such as email Address, Address, US Social Security Number, etc.:
Create the associations of More General to More Specific between them. In the Semantic Mapping tab of the object page for GDPR we then have:
