In today's IT era and interconnected corporate world, people are being asked to give away large amounts of personal information for various business purposes. This raises concern of people regarding adequate and secure use of personal information. Here are presented key technical measures, mapped especially to personal information which should be implemented in IT systems. These measures encompass controls related to systems and applications access, communications protection, security and availability of data at rest and other.