Can this not be solved by RBAC? But I am not sure what all questions were asked and what the setting was, what database was used, what prompts etc.
If going against a datasource (like with Retrieval Augmented Generation), yes.
If the information is just part of the context window, no.