My Company has hired security through an outside source. She is allowed to enter into the clients records on the computer. I wanted to know if that is legal or should she be stopped?

My Company has hired security through an outside source. She is allowed to enter into the clients records on the computer. I wanted to know if that is legal or should she be stopped?