Ditto John. At the federal level, the GLB privacy provisions have no effect on inadvertent disclosures. The legal effect of their requirements is to require you to give a describe your practices and give the consumer an opportunity to opt out of certain disclosures. However, the customer information security provisions with their origins in GLB should prompt you to follow John's advice and see if there is a systemic problem.
_________________________
In this world you must be oh so smart or oh so pleasant. Well, for years I was smart. I recommend pleasant.