why protecting sensitive personal information (spi) is more important than ever before