Explain your approach to designing secure, RESTful APIs that handle sensitive health or personal data.