It's been a while, but at a previous job (maybe 8 years ago) I was responsible for managing mobile devices and using Blackberry's MDM suite, you could have segregation of personal and private data, where you couldn't move data from one "container" to the other, including clipboard data.

I'm out of the loop now, though.

Android did have better support at the time, but if I remember correctly, devices that had a work managed profile on them could still be completely wiped, including the personal/private container.

A bit of a pain, but I've always preferred (where possible) to have separate work and personal devices.