Security controls that prevent sensitive data from leaving a restricted environment without authorization.