For IT forensic investigations, all the data deemed necessary is often copied, secured, and evaluated. This typically also includes personal data of employees or external partners. If such data is accessed without justification and without the involvement of the Data Protection Officer, for example, the organisation in question may have violated related legal regulations (e.g. with regard to appropriation). It is also possible that the collected data can be used to deduce how employees behave or establish associations to them. This carries the risk that internal regulations may be violated, as well.