Journey/Onboarding: How to deal with sensitive information?

Summary:

Content (required):

Hello everyone,

We are trying to understand how to deal with sensitive information and which actors should have access to them.

For example, our client would like to have two sensitive questions (tasks)--> "Disability - Confidential" and "Citizenship(s)" during the pre-onboarding phase.

We tried to restrict the visibility of the tasks for the "Other User" by selecting "Hide" for the "Task Access" value, but everyone (who has access to the assigned journeys) can see the above questions/tasks.

For example, for the preonboarding phase the client also wants to have an IT Actor for the task "Laptop Choice" (we also restricted the visibility for the IT by using AoR), but the IT user can see all the assigned tasks to the user and not just his own AoR.