Provided is a digital/analog signal processing apparatus and method for controlling exposure of personally identifiable information to be transferred from storage in a secure enclave, comprising a memory and an integrated circuit coupled to the memory, configured to: select a data set stored in the storage; individuate personally identifiable information in the data set; determine an individual person's subset of personally identifiable information; extract an identifier for the individual person from the subset; interrogate stored data using the identifier to locate metadata comprising permission to expose the individual person's subset; and responsive to a failure to locate the metadata comprising permission, either: emit a signal seeking the permission; or apply a protective measure to the individual person's subset of individuated personally identifiable information prior to transfer of the data set in a digital/analog signal outside the secure enclave.