If i was the manager of a business what company policy would i put in place for staff access to customer database?

the same policy instituted for publicly traded companies. privacy at all costs, no information to be given out by anyone at anytime anyone found giving up information could be held under corrective action, up to and including termination. or limit the amount of people that can have open access to those policies. remember dsw credit card scandal? or limit the amount of data collected from your customers.