Access to personal data without an audit trail means misuse can happen invisibly and deniably. Logging who viewed which records, when, creates both a deterrent and the evidence to act when access crosses a line.
“Unlogged access to PII is misuse with no witness.”