[vinay_ys]

  Proper data hygiene at large enterprise levels is, in fact, exceedingly difficult.

Creating a hermetically sealed IT environment where only way to exfiltrate data that remains is the employees eyeballs is definitely possible and is increasingly done well by a lot of large organizations.

Defending against insider threat (malicious employees) is still a challenge for most civilian (non-military) organizations.