As an Information Assurance officer, I routinely protect the identity of my users in several ways:

1. I require everyone to screen material they throw away for personal data and to shred those documents instead of putting them in the trash can.
2. For paperwork they keep with such information, I require users to keep it in locked cabinets.
3. I perform random inspections of the workplaces looking for smart cards left in CAC readers, or monitors left up and unlocked.
4. I scan our networks for such information and require it either to be password protected or placed in less vulnerable locations.
5. Do you really think I look like a cat?