What is the best way to manage personally identifiable information (PII) data?