A financial services firm uses a SaaS collaboration platform where analysts routinely share reports containing customer account data with external partners. During a lifecycle review, the security team maps controls to each cloud data lifecycle phase. Which control is MOST appropriate to enforce during the 'Share' phase to prevent unauthorized disclosure of sensitive data as it leaves the organization's boundary?