Method and apparatus for handling personal information