I would make sure to only discuss sensitive information with approved personnel. I would ensure never to leave information or folders in the public's reach, or open for anyone to see.