NIST, Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) (NIST Special Publication 800-122) (Jan. 2009) (full-text).