I wrote a pay app and as part of that, I have a HTML5 canvas where buyers can sign for credit card or goods received. I then ajax the base64 back to the server in a DB table (genius, I know). I also have a means of changing it to png for reporting and other things.
Do I need to treat the base64 image string as if it is PII and apply the same protocol? Even with a GUID as the name?