requiring a second person to verify/supervise access to confidential data solves a lot of this problem (at a cost though). like it doesn't prevent a strong adve

requiring a second person to verify/supervise access to confidential data solves a lot of this problem (at a cost though). like it doesn't prevent a strong adversary from getting access to data they shouldn't but it prevents normal people from abusing power they have stumbled upon. require two logins + audit and a lot of the abuse goes away. people are less inclined to lose their job because their colleague wants to check up on their girlfriend.