The sentiment is correct, but there are a number of caveats depending on the nature of the work.

Dealing with any data that is defined under a compliance policy of some kind, for instance.