Half of staff have too much access to data