Example
An employer separates health records from general personnel files and gives managers only the information necessary to arrange relevant workplace support.
What to keep in mind
Sensitive information needs particular care, but ordinary employee records also require protection. Review access when roles change and avoid sharing entire files when a limited extract would meet the purpose.