Many organizations do not realize the personally identifiable information that they hold. If you have customers, employees or vendors, you have personal information that needs to be protected.