The Federal government requires organizations to identify PII (Personally identifiable information) and PHI (Protected Health information) and handle them securely.