The best way to protect data with

personally identifiable information

 is to not have it.