On a day to day basis, we apply the model of privileged access, meaning we access the minimum of what is necessary in order to perform the requested or required task. We only access an account’s data without permission in very specific and rare cases such as legal holds. In those cases, we never look at the contents, but pull the requested information without further perusal.
