• Encrypt or hash all sensitive data in transit or at rest.

  • Ensure you use NIST-recommended strong cryptographic algorithms.