Hi - can you be clear what on I would configure on a new read ACL?  I am struggling a little to work out your fix - would really appreciate it - thanks in advance.

Note once more that the only records affected are those updated by the data import.