This is pretty much exactly what European data protection law says. Although it doesn't put very much emphasis on protection against accidental disclosure, it's more intended against deliberate disclosure.