Yes. User data, especially PII data, is very closely watched. If I tried to access something that I shouldn't (assuming that I managed to get the right permissions first), I have no doubt that I'd be fired by the end of the week.