jacquesm is completely correct - for example, at the company I currently work for we have very strict policies around this, and also how things are encrypted/et

jacquesm is completely correct - for example, at the company I currently work for we have very strict policies around this, and also how things are encrypted/etc. We don't want access to user data, files or say - encryption keys. Having access not only violates the trust of the user(s), it fundamentally exposes us to liability we do not want. Anyone and everyone who has access to account data - no matter how trivial that data may seem to you needs to treat that data as extremely sensitive and with the utmost respect and those that mistreat it, or abuse that power should be grossly punished.