Question
A security incident review finds that retrieved HR records include salary history, manager notes, and benefit elections when the agent only needs employment status. The answer sometimes mentions unrelated salary details. What is the best fix?