Sensitive safeguarding information can be protected through restricted roles, permissions and controlled reporting. Organisations should apply least-privilege principles so access is based on genuine responsibility.