User can view departments from legal entities other than their own

A user can view departments from entities outside of their designated legal entity and outside of their Area of Responsibility.
User has these roles but can view departments from other Entities such as "SpA" but they should only be seeing from "Caribe":

Is there a reason that they can view departments from outside of Caribe/CRB?

This is the setup of the HR ADMIN DATA ROLE:

All are set on the region Caribe which should be right, but the user can still view other departments from different legal entities.

Attached below is the department view of the user. User can access departments from all Legal Entities, but we only want the user to view CARIBE departments.