This guide provides University buyers guidance on how to identify personally identifiable information (PII) when negotiating service agreements or issuing purchase orders for work to be performed by outside vendors. If the vendor will handle, process or have the ability to access PII, then buyers must take the following steps: