Most confidentiality breaches aren’t the result of bad actors or intentional misconduct. They come from a fundamental misunderstanding of the rules.