Access to personally identifiable information is limited to those who need it to perform their job. Data privacy laws typically focus on the protection and restricted access to personally identifiable information (PII). Limiting access to PII ensures that the data is only available to employees whose job functions require it, which is a direct response to many data privacy regulations aimed at protecting individuals' personal data.