PII data should be stored in encrypted form with tightly controlled keys. Web servers should decrypt on an as needed basis by exchanging user cookies / token f

PII data should be stored in encrypted form with tightly controlled keys. Web servers should decrypt on an as needed basis by exchanging user cookies / token for decryption keys. That prevents having “god” servers in the frontend serving path that are a malformed sql query away from exposing all data.