Handbook for Safeguarding Sensitive PII Privacy Policy Directive 047-01-007, Revision 3. Published by the DHS Privacy Office. December 4, 2017.

This Handbook provides best practices and DHS policy requirements to prevent a privacy incident involving PII/SPII during all stages of the information lifecycle: when collecting, storing, using, disseminating, or disposing of PII/SPII.
This handbook explains:
how to identify PII and SPII,
how to protect PII and SPII in different contexts and formats, and
what to do if you believe PII and/or SPII has been lost or compromised…”