Have you seen the horror of leaking a personal file to an entire campus? I know I have. A few years ago, an office on campus accidentally emailed all the subscribers to a big mailing list someone's personal information, including passport pages, social security numbers, and panically asked everyone on that list to please delete that email a few minutes later. We know that this won't happen again, as now the campus IT has the admin access to delete a certain email from everyone's in box immediately, that is a proactive approach.
Get help from the university IT Solutions or research IT for more professional suggestions, but for a starting point, here are some items to consider.