You can expressly prohibit copies and/or prohibit storage of confidential information on non-business (external) systems.