What are the biggest compliance mistakes call centers should avoid?

Our support team is growing, and we're starting to receive more calls involving personal customer information. I'm worried that even small mistakes could create legal or security issues. Which compliance errors are the most common, and what habits help prevent them without making daily work too complicated for agents?