Here are some best practices for safeguarding sensitive personal data.