How to store and process personally identifiable information in a company with minimum risks.