The notes area of HR lacks any security permission at an individual note level. Something similar to the category based security permissions as found in Pupil Managers Documents would work well here.

It feels like a bit of a large oversight as the importance of confidentiality within the module is critical, in particular when multiple people require access to the notes area but should only be able to see relevant notes. Payroll staff would need to be able to see any payroll notes but not HR notes, HR should see these but potentially not confidential notes around disciplinary.