What about when management forces or tries to force you to do something that you know is wrong? Such as giving them data that's private, but they do not want to go through the proper channels to get access?

I realize the easy answer is "Tell them NO" - but when it's management, especially upper management, it's not easy to just say no, unless you have another job lined up.