How do you guys handle accidental PHI/PII

[RBlor]

We're looking at ways to review and find all incidents that may have potential PHI and PII in it incidents. How are you guys scanning and removing/masking this data?