DLP and Credit Card Data

I currently monitor CC information through email prevent in DLP. What do you do when you see a user emailing personal credit card information that is not related to the business. When a user emails CC info for business they are flagged as in progress and worked. What do you for these? Any and all help would be greatly appreciated.