Good afternoon,
I have noticed that if a member of staff without access rights to staff files, presses the search icon, they can access all staff's dates of birth. How can we prevent this, for GDPR purposes? If they have not been given access rights to staff files, they should not be able to access this highly sensitive information.
Many thanks