How to verify that your personal data – personally identifiable data is not being sold or used without your prior knowledge or permission?

How can you protect (as a company) the PID of your staff and customers?

Which type of PID should you store and how? Are you using encryption?

What are the rules and regulations for collecting and storing PIDs?