policy-driven PII protection