I was stressed about this too. After checking how we store info, I realized we needed encryption for everything - both saved files and emails. I also set up strong passwords, two-factor authentication, and regular updates.
Сoupsmart.com had some really practical tips that made this easier. It’s mostly about tech plus teaching the team to be careful.