There are also way too many people with access to non-anonymized data. i.e. the development team that has read privileges on the production database. e.g. employees at uber spying on customers (
https://www.theguardian.com/technology/2016/dec/13/uber-empl...).
edit:
shameless plug. check out tonic.ai for a solution to the above problem.