Maybe not a legal reason per se, but even if you have production data access appropriately locked down there will be some people who hold the keys to the kingdom. There's a lot more risk of people peeking at things they aren't supposed to when the data in question is about their own company, friends, coworkers.