"Personal information" means any identifying information, excluding work products, that is a part of the permanent record and that describes, locates or indexes anything about an individual including, but not limited to, education, financial transactions, medical history, criminal or employment records, registration or membership in an organization or activity, or admission to an institution. Personal information may be classified as mental health information, child abuse or neglect information, medical information, or other types of sensitive information and may be governed by different access, consent and disclosure requirements. (R 431)