> The best way to protect PII is to ruthlessly minimize it in your system. Absolutely, been trying to preach this for ~10 years now at various companies. Anot

> The best way to protect PII is to ruthlessly minimize it in your system. Absolutely, been trying to preach this for ~10 years now at various companies. Another argument to make is that I can guarantee 100% certainty against leaks with a budget of $0, for all the data columns that I never had. Such a deal! Any other choice is going to cost a lot more and have reduced chance of success. Sure, we need to handle some sensitive data to run the business but choose selectively, since every one just adds both cost and risk.