20-19_csu_personally_identifiable_information_-_final.pdf