Use encryption, access controls, informed consent, and delete data when no longer needed to protect sensitive info.