How much is enough? Contractors' and consultants' PII