A healthcare startup is using Amazon Bedrock to generate clinical notes. They must prevent the model from outputting any personally identifiable information (PII) such as patient names. What is the most effective approach?