Depends on the dimension used. « Shoulds » are meaningless. Let’s not assume everyone is doing shit work, awareness is getting there and people and getting more capable to correctly classify data.
Anyway assuming correct classification there are techniques that changes classification enough to allow exportation of data to shit countried.
An alarming amount of data that should be classed as PII isnt. information in aggregate changes classification, PII should be treated the same.
Depends on the dimension used. « Shoulds » are meaningless. Let’s not assume everyone is doing shit work, awareness is getting there and people and getting more capable to correctly classify data. Anyway assuming correct classification there are techniques that changes classification enough to allow exportation of data to shit countried.