Employees having access to too much private data has been a recurring problem. The risk behind this is that employees can unknowingly cause data leaks through actions like falling for an email scam, sending data to the wrong person, forgetting to lock their device, etc. The data an organization has needs to be restricted. IT Asset Managers need to work with IT security to ensure the least/most data access policies are followed.