Given that much of the customer data for CRM is sensitive, ethical companies ensure the data is kept private to the maximum extent possible. To achieve this, the company must store the data in a form or in a location not generally accessible. The data must only be consulted when necessary for the fulfillment of a CRM task, and only those employees who handle the data to complete the task are able to access the data. When sub-suppliers need to use the data, they must first commit to restrictions similar to what the CRM company has in place.