Better to not expect anything from anyone, and you wont be disappointed.

What you do is simply restrict data to employees on a need to know basis. Not difficult to do.