Mechanisms exist to limit access to sensitive/regulated data to only those individuals whose job requires such access.