Since Databases Storing Personally Identifiable Information (PII) usually are SPs, the requirements for SP also apply.
A future version of this document will specify in detail
Special encryption concerns
Special privacy protection
Record keeping and audit