We do not want all staff being able to access all records that we hold. How can you ensure traceability and accessibility to the data stored?​