How to restrict access to records for workers in the HR Team

Summary:

Apart from a superuser, the rest of the HR Team are able to view the records of all workers in the company aside from themself and the rest of the HR Team (plus some other departments such as Execs).

The security we have in place enables that restriction by using the Department Security Profile which works correctly.

The problem we have is that when a worker is transferred to the HR team at a future effective date their record was still visible.

The security was then corrected by creating a custom Person Security Profile that had a predicate to check for future dated records.