When any type of data is exported, create a log to stamp when it was done and by whom and to include a drop down window on why it is being exported. Naturally, the simplest way to track this is not to allow anyone to export unless they have the overall authority to do so and limit such authority to a fix number and not more than X.

This is essential to ensure privacy and enjoy the public's trust of any information we have collected from them