When is it acceptable to a IT business to make copies of customer's confidential data?
As an IT, you have access to personal data. You should always get customer permission before copying or changing it.