Why is it impossible to commit? Restricting access to select people and firewall groups from these data , putting that in your contract with sellers are reasonable things he can do . It will not be perfect , people can still talk etc

Just because your safeguards will not be perfect doesn’t mean you shouldn’t have any. It is akin to saying as there are many zero days out there so I won’t secure my infrastructure at all .