Except putting barriers can cause even worse problems. If I can’t look up someone’s allergies because the system doesn’t think I should, fuck them right?
Better to avoid that situation and implement auditing while making sure people know the rules are enforced.