An organization is developing its GDPR compliance strategy and aims to guarantee that personally identifiable information (PII) stored in Cloud Storage buckets remains confidential without any third-party exposure. Which Google Cloud solution should the organization utilize to confirm that PII is stored appropriately without internal exposure?