Some Failure modes
Collaborator has legitimate access
Unintentionally obtains wrong data
Can gain broader access than intended
Internal user ships improper data out
Fails to understand release constraints
Coverage of releasable and non-releasable data overlaps
(credit card nos instead of MP3)