If you wanted to block only confidenhtail data than you should add class ID of that SD card devices. you should also take help of DLP application monitoring and control feature.
https://www-secure.symantec.com/connect/forums/dlp-bluetooth-prevention-endpoint-prevent
https://www-secure.symantec.com/connect/forums/usage-media-transfer-protocol-transfer-data
In short the services which helps to copy any data tranfer throgh some device driveres for medium bluetooth, wifi,usb,SD card can be blocked.