Scotland's NHS boards logged more than 5,000 data breaches in four years, and most weren't hackers. Staff shared patient records on WhatsApp, snooped on cancer patients' files, and one radiographer pulled 200+ women's records to stalk them. At least 182 staff were disciplined. Here's the uncomfortable part: your biggest data risk is usually the people you already trust with access. A firewall won't catch a curious colleague. Log who reads what, and act when they shouldn't.