Ask HN: Application Design does CSR viewing of sensitive info get logged

I was just on a call with my bank diagnosing an issue using Firefox to login. As part of the process it seemed apparent that the tech person (not a typical CSR but a tech who works specifically in support in that area) had the questions I choose and was able to view all my answers such as "Mother's Maiden Name" [1] etc. I'm curious if in system design it's considered essential and a best practice to log anytime a CSR, or any company personnel, views that type of sensitive information. And is not doing so considered insecure and a bad practice. [1] I don't use that for obvious reasons.