What sanitizing is needed for writing from a text input field to a tag?

I use runPrepUpdate to sanitize data going into my database.

What is necessary for sanitizing strings in input fields that I will write to tags?
Should I implement a regex like Jordan's example here: