If you want to keep a company of hundreds or thousands people following some rule, really the only way is if you create processes that check and force that. There is no way to keep company following privacy rules (as weak as they are) without company wide protocol and insistence on it.

Otherwise, the pressure from people who want to do other things will ensure that privacy or rules will be ignored.