As much as I love dunking on Zuck, it might be difficult to detect all unnessecary data viewing, especially if someone is part of an internal security team whos

As much as I love dunking on Zuck, it might be difficult to detect all unnessecary data viewing, especially if someone is part of an internal security team whose job description includes looking for hackers on FB's systems. So basically, if the abuse is not egregious (ex: looking up a celebrity's details), they have to rely on someone making a complaint and then reviewing the employee's logs. I knew someone who worked for the IRS and they had similar issues - it's harder than you'd think to automatically detect this kind of thing, the best you can do is log so you can punish if it's discovered someone abused credentials.