Employee Benefit Statements Access Control List
We are fierce Advocates of Client Confidentiality.  In fact, you'll never see mention of your Company anywhere on our site and we'd certainly never use any data of any type for any purpose other than those specifically stated in the Project Goals.
The majority of confidentiality violations do not come from Vendors. They come from Employees within the Company & often originate with HR.
Before we begin work on a Project, we must understand your own, Internal Roles & Privileges.  As an example, we may require a set of Images from your Marketing Department.  It is obvious (at least in our mind) that this individual should not be allowed to View ANY personal data.  None.
This was an easy example, but others may be less obvious as you may prefer specific members of your own HR Team to be excluded from certain types of info. We must know.  
Each Team Member must understand their Role for any employee communications project.  We would then restrict Correspond-ence based on the above.  'Benefits mgr' would inform us of any changes to Roles.
An Employee benefit statements project is complex & requires Access control.
We will need Detail in the spirit of the example below.
Team MemberAnne
ChrisPenny
Karen

Ginger
CorkyHomer
RoleAll - All privileges, no restrictionsno_retire - No retire, options, 457 datano_wage_retire - no_retire or wage datano_457_options - No 457 or options datano_data - No data
Team TitleBen Mgr
HRISPayroll mgr
BenefitsSpecialist
Receptionist
MarketingTraining
AllowedRoleAll
no_457_options

no_retire

no_wage_retire
no_data
 Employee Benefit Statements:  Reports