How to isolate departments/location visibility on comments and attachments for candidates

A client has three different departments in the same business, configured as locations, and one of those three has another 11 sub-departments, each with their own recruiters, processes and requisitions to manage in silo.

The attachment section and the comment section of a candidate's file appear to be shared accross the platform, and there can only be one resume active at a time per candidate, making multiple applications using specifically tailored resumes impossible.

Is there a way in Taleo Business Edition to make sure that confidentiality can be respected between locations and entities, departments and sub-departments essentially, so that the comments, attached documents and resumes can be separately accessed depending on the user's role and location.