Balancing risks: How the SRA's FP2 affects PII