When dealing with peoples personal information being stored electronically we have a moral duty to keep that information private.
one issue people can have is when an authorized user to private information decides to share there password or they leave there computer unlocked or open for anyone to see or look at information that otherwise would be unavailable.
Another issue can be when employees or even the company could use this private data and sell it to other companies for profit.
Companies can also not take there cybersecurity seriously and not invest in the proper protections leaving there data of peoples personal information vulnerable to attacks.
Employees not following proper company procedures and accidentally giving out personal information to someone who was not authorized to have it.