Except in exceptionally poorly run or small organisations, random employees do not have access to everything; generally they need a reason to look at stuff, and there’s a paper trail indicating that they looked at it.