This absolutely happens, there's a set of teams whose job it is to make sure it happens every time a system is going to be handling customer data. It's not left to the engineers to remember to do so.