Who was the weakest link in the chain of security and protection of privacy data in the lab case study?

In a study, it was discovered that the weakest link to be found in the security chain and the protection of private data were supervisors. Supervisors were very aware of what the analyst was doing and what was happening, but the majority of them did not report it to anyone.