(1) In this Act:
"protected information" means information about a person that is disclosed to, or obtained by, an information holder because the information holder is, or has been, an information holder.
(2) Without limiting subsection (1), protected information includes sensitive information.