Even if you have super duper data protection policies in place, those in the know might still be able to find their way around them.
Here’s a guide from law firm Taylor Vinters on how to prevent things becoming too messy :https://www.taylorvinters.com/article/criminal-conviction-data-theft/