A secretary should follow company protocols for data protection, use secure channels for communication, and only share confidential information with authorized personnel.