How do I protect confidential business data when an outside developer needs access?

Give the developer only the systems and data needed for the task, use named accounts and temporary access, avoid sharing production data when test data will work, and log higher-risk access. Remove access promptly when the work ends.