Well, of course they do. But they also have extremely strict rules about when you can access what user data and why. Employees can and do get fired for minor infractions of those rules.
Yep, this isn't news at all, I remember reading an interview with an employee which they stated that every account access was logged and anyone that was found accessing information for non-valid reasons would be fired (I can't remember if they also pressed charges).