Agree completely. Encryption or tokenization is great but a much easier first step which covers the first order problem of employees abusing access privileges i

Agree completely. Encryption or tokenization is great but a much easier first step which covers the first order problem of employees abusing access privileges is simply a secure audit trail and someone to actually look at the logs and discipline or terminate employees who misuse their access. There are probably innumerable reasons to have access to a particular ride’s exact route, or a particular users ride history, or feedback history, etc. Just like the police have many perfectly valid reasons to run a plate. Audit logging and request throttling are the low hanging fruit. If your system can tie each request to the service ticket which prompted it, even better.