HR Profile Security

We are considering applying HRSD, which has already been implemented globally, to Japan.
We want to control access to sensitive information such as HR Profile and Job by country, region, etc.
e.g.) HR staff in Japan can only access HR Profile and Job data of employees in Japan.

If we were to do this, we are thinking of using ACLs to control access based on the user's affiliation information (e.g., company, location, etc.).

If you have any other information on how to do this, or if you have done this in an actual case, please let us know.