The authority to access customer information is granted when necessary during work procedures, and the instances of customer information usage must be reported to managers in charge on a daily basis, identifying the purpose and reason.