I think I'm going to put CONFIDENTIAL on every single email, even if it's something silly like "DS needs to leave 10 minutes early today." Of course they can still circulate it but at least I'm sending a message to them that I don't want emails forwarded. And for anything involving private or personal information, I will email and ask them when the are available to talk on the phone or in person.