Fields that look like personal data — email, phone, national ID, and more — are now flagged automatically, based only on their names, labels, and types. Detection never reads a single record value. Review the flags on any field, and pull the full inventory together in the governance report. Free to see; the exportable governance report is on Pro.