Sensitive data can leak through files, APIs, logs, and analytics pipelines before it reaches a protected database. In this practical session, I will build a Python pipeline that discovers PII, masks or pseudonymizes risky fields, encrypts sensitive values, and verifies protection with automated tests. Attendees will leave with reusable patterns for securing real-world data workflows using pandas, Presidio, cryptography, and pytest.