Rob,

I see most of the replies have been to provide technical solutions within the HR Scoped app using ACLs.

I'm going to suggest another approach for you to think about. The HR Scoped App has an extra application "Employee Document Management". (https://docs.servicenow.com/bundle/london-hr-service-delivery/page/product/human-resources/concept/hr-employee-doc-management.html)

One of the key points with EDM is that it allows you to put security controls around documents associated with Employee's Profile (from cases, etc) via Document Types:

Use document types to:

• Associate a security policy. Security policies determine who can access employee documents and determine purge authorization.
• Associate a retention policy. Retention policies determine how long to keep a document and who the document is applicable to.
• Place a legal hold. Legal holds temporarily prevent document purging or changes to the document.-
• Allow access to employees.
• Configure employee documents to be moved automatically when an HR case is closed. Assign a topic detail associated with an HR service that has the Automatically move attachments box checked. See Configure an HR service.

Keep in mind EDM is an extra license cost.

Thanks,

Kevin