The most common cause for Personally Identifiable Information (PII) leaking into analytics tools is through the URL of the website. This Variable Template for Google Server-Side Tag Manager (SGTM) fixes this problem by making it possible to Exclude or Whitelist Query String Parameters from the URL.
This Template is available in the Google Tag Manager Template Gallery.
Full documentation of the Template can be found on Github.