Controlled-Access Data Governance in the LLM Era: Old Rules for New Machines