GDPR compliance for sensitive columns is not optional. It is enforceable, with penalties reaching millions. Names, email addresses, phone numbers, national IDs, IP addresses—these are identifiers. If they appear in any column, that column becomes sensitive. The law demands that you limit access, apply encryption or pseudonymization, and track