Broken access control can allow unauthorized users to access sensitive information or functionalities, leading to privacy breaches and potential data leaks.