All employees handling confidential information should sign a confidentiality or non-disclosure agreement before processing confidential information.
The agreement should include e.g.: