This doesn't really make sense, did you read through the Cypher online training?
you probably mean something like
MATCH (personalData:PersonalData) -[:USED_ON]-> (resource:Resource) <-[:OWNS]-(org:Organisation {organisationId : 'XXX-YYYY-ZZZ'} )
MATCH (personalDataItem : PersonalDataItem) <-[:CONTAINS_DATA_ITEM]- (personalData)
WITH personalData, max(personalDataItem.sensitivity) as maxSensitivity
SET personalData.sensitivity = maxSensitivity
or in one single MATCH pattern
MATCH(personalDataItem : PersonalDataItem) <-[:CONTAINS_DATA_ITEM]-(personalData:PersonalData) -[:USED_ON]-> (resource:Resource) <-[:OWNS]-(org:Organisation {organisationId : 'XXX-YYYY-ZZZ'} )
WITH personalData, max(personalDataItem.sensitivity) as maxSensitivity
SET personalData.sensitivity = maxSensitivity