It's sloppy use of language by someone who works in the sector.
And businesses wanting to be compliant with GDPR should not be misled with US PII terminology