The administrator can now set an option on each user account to prevent the person from saving data that is private to them i.e. the user would only be permitted to save data that is owned by a workgroup they are a member of.  This is useful in a team environment where there really is no reason to have private contacts and you want to eliminate the chance of that from happening.