Custom roles gives read only access to Family and Emergency Contacts outside data scope

Summary: We have created a Custom HR Business Partner Job Role (Copy of Human Resource Specialist Role). When user with this role opens the Family and Emergency Contacts for any employee outside the access scope, the user can view the contact details.

Content (required): This role has all the Privileges and data Security Policies and this issue is not with any other Personal Business object.

Version (include the version you are using, if applicable): 21C

Code Snippet (add any code snippets that support your topic, if applicable):