Client work changes hands. Keep every copy traceable.

Protect the private portal where clients review your work, then give every image or PDF you deliver its own recipient identity. If something surfaces elsewhere, you can check which client session or copy it most likely came from.