Well, it wouldn't do a lot of good otherwise, since I'm pretty sure most data breaches aren't committed deliberately. The point is you should have measures in place that prevent those sorts of mistakes.