How do you protect sensitive data such as PII at rest and in transit?

Write or say your answer first, then compare it with the model answer.