Staff copy data between systems — how do you stop it?