This is common practice - have a "black list" that you watch of famous people including everything from MPs to prisoners who have some notoriety and flag any access to them for review.
We do it in healthcare, but also have automated auditing in place on newer systems to flag staff looking at their own/family/other staff records where possible. Nothing is perfect though and the black list tends to at least be a start for many companies.
Biting the hand that feeds IT
